Modify

Opened 10 years ago

Closed 6 years ago

Last modified 2 years ago

#1 closed defect (fixed)

TracPermissions are not enforced in the PollMacro

Reported by: athomas Owned by: athomas
Priority: high Component: PollMacro
Severity: major Keywords: permissions
Cc: halkeye@… Trac Release: 0.8

Description

TracPermissions are not enforced in the PollMacro. The poll should not be modifiable if the user does not have write access to the page.

Attachments (0)

Change History (15)

comment:1 Changed 9 years ago by evan.s[at]dreskin[dot]net

This might be better as an option, as we only allow developers to modify the wiki but I can imagine a general poll being useful

comment:2 Changed 9 years ago by athomas

  • milestone changed from 1.0 to 0.9
  • version changed from 0.1 to stable

comment:3 Changed 9 years ago by halkeye

  • Cc halkeye@… added
  • Summary changed from TracPermissions are not enforced in the PollMacro to

something along what AddCommentMacro uses?
the appendonly parameter?

I was thinking about adding a showcount or something so you don't see the list of users.

comment:4 Changed 9 years ago by athomas

Yes, permissions like AddCommentMacro were what I was thinking of. The showcount idea would be difficult to achieve, as the comments are just added to the body of the page like a normal Wiki edit. It could be an idea though.

comment:5 Changed 9 years ago by halkeye

showcount wouldn't be that hard actually, the results are not in the body of the post, they are in a seperate file that you specify at the top of the wiki macro.

http://darkwarriors.kodekoan.com/cgi-bin/trac.cgi/wiki/ideaCombatXP?action=edit
vs
http://darkwarriors.kodekoan.com/cgi-bin/trac.cgi/wiki/ideaCombatXP

the data is not stored inside.

comment:6 Changed 9 years ago by athomas

Whoops, sorry about that...I was thinking of counting and AddCommentMacro :)

comment:7 Changed 9 years ago by athomas

  • Status changed from new to assigned
  • Summary changed from to TracPermissions are not enforced in the PollMacro

comment:8 Changed 9 years ago by athomas

#54 is related to this, but specifically regarding anonymous users.

comment:9 Changed 9 years ago by athomas

  • milestone 0.9 deleted

Milestone 0.9 deleted

comment:10 Changed 8 years ago by athomas

  • Resolution set to fixed
  • Status changed from assigned to closed
  • Trac Release set to 0.8

Fixed when the PollMacro was ported to a plugin

comment:11 Changed 6 years ago by ankur

  • Resolution fixed deleted
  • Status changed from closed to reopened

comment:12 Changed 6 years ago by athomas

  • Resolution set to fixed
  • Status changed from reopened to closed

Uh?

comment:13 Changed 6 years ago by anonymous

  • Resolution fixed deleted
  • Status changed from closed to reopened

comment:14 Changed 6 years ago by anonymous

  • Resolution set to fixed
  • Status changed from reopened to closed

comment:15 Changed 3 years ago by zerodeux

(In [10765]) Basic support of JAR-like output format, need a better internal interface (cli or web should pick the filename and ask the export code to generate it), see #1

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.