Changes between Version 28 and Version 29 of TracFineGrainedPermissions

Timestamp:

Feb 15, 2011, 5:20:40 PM (13 years ago)

Author:

m.jason.miller@…

Comment:

Added additional AuthzSourcePolicy configurations.

TracFineGrainedPermissions

@@ -90 +90 @@
 john = BROWSER_VIEW, FILE_VIEW
 
-
 # All repositories:
 [repository:*@*] 
 jack = BROWSER_VIEW, FILE_VIEW
+
+# Very fine grain access:
+[repository:test_repo@*/source:/@*]
+anonymous = BROWSER_VIEW
+
+[repository:test_repo@*/source:trunk@*]
+anonymous = BROWSER_VIEW
+
+[repository:test_repo@*/source:trunk/src@*]
+anonymous = BROWSER_VIEW
+
+[repository:test_repo@*/source:trunk/src/*@*]
+anonymous = BROWSER_VIEW, FILE_VIEW
+
+[repository:test_repo@*]
+anonymous = CHANGESET_VIEW
+
 }}}
 
 Then: 
- - All versions of test_repo will be viewable by john
- - All versions of all repositories will be viewable by jack
+ - All versions/files of test_repo will be viewable by john
+ - All versions/files of all repositories will be viewable by jack
+ - anonymous will only have FILE_VIEW on files within the test_repo repository at the exact location: trunk/src/
+ - anonymous will also have CHANGESET_VIEW for the test_repo repository (see following note)
+
+Note: It is important to know that the order in which you configure permissions must be maintained. If we were to add the CHANGESET_VIEW permissions for anonymous before declaring the other permissions, you would find the user anonymous would only have CHANGESET_VIEW permissions for test_repo, and nothing else.