Changes between Version 8 and Version 9 of CookBook/Configuration/SignedTickets

Timestamp:

Sep 22, 2016, 6:59:29 AM (8 years ago)

Author:

Ryan J Ollos

Comment:

Skip permission checks on admin_actions.

CookBook/Configuration/SignedTickets

@@ -66 +66 @@
 
     allowed_actions = ('TICKET_VIEW',)
+    admin_actions = ('TICKET_ADMIN', 'TRAC_ADMIN')
 
     def check_permission(self, action, username, resource, perm):
@@ -71 +72 @@
                 resource.id is None or \
                 action in self.allowed_actions or \
-                action == 'TICKET_ADMIN' or 'TICKET_ADMIN' in perm:
+                action in self.admin_actions or \
+                any(a in perm for a in self.admin_actions):
             return None