Ticket #1289 (closed defect: fixed)

Opened 1 year ago

Last modified 4 months ago

[PATCH] Do not display 'Custom Query' for anon user, if it's not enable

Reported by: jorge.vargas@gmail.com Assigned to: ashwin_phatak
Priority: normal Component: BatchModifyPlugin
Severity: trivial Keywords:
Cc: Trac Release: 0.10

Description

Hi I'm running a closed trac (no permissions for anonymous) in which I installed batchmodify. One user pointed the link was showing which I believe is bad behavior.

To reproduce: take out the VIEW_TICKET permission from anonymous and go the main page, you should see the "Custom Query" tab but then it will ask for credentials, so this is not a security issue.

but the attached patch should fix it.

Attachments

wrong_permission.diff (0.6 kB) - added by jorge.vargas on 03/06/07 18:11:41.
a small patch to fix showing the batchmodify tab when credentials are not valid

Change History

03/06/07 18:11:41 changed by jorge.vargas

  • attachment wrong_permission.diff added.

a small patch to fix showing the batchmodify tab when credentials are not valid

02/20/08 07:34:35 changed by ashwin_phatak

  • status changed from new to closed.
  • resolution set to fixed.

(In [3254]) Fixes #1289

Add/Change #1289 ([PATCH] Do not display 'Custom Query' for anon user, if it's not enable)




Change Properties
Action