Modify

Opened 7 years ago

Closed 6 years ago

#1289 closed defect (fixed)

[PATCH] Do not display 'Custom Query' for anon user, if it's not enable

Reported by: jorge.vargas@… Owned by: ashwin_phatak
Priority: normal Component: BatchModifyPlugin
Severity: trivial Keywords:
Cc: Trac Release: 0.10

Description

Hi I'm running a closed trac (no permissions for anonymous) in which I installed batchmodify. One user pointed the link was showing which I believe is bad behavior.

To reproduce: take out the VIEW_TICKET permission from anonymous and go the main page, you should see the "Custom Query" tab but then it will ask for credentials, so this is not a security issue.

but the attached patch should fix it.

Attachments (1)

wrong_permission.diff (573 bytes) - added by jorge.vargas 7 years ago.
a small patch to fix showing the batchmodify tab when credentials are not valid

Download all attachments as: .zip

Change History (2)

Changed 7 years ago by jorge.vargas

a small patch to fix showing the batchmodify tab when credentials are not valid

comment:1 Changed 6 years ago by ashwin_phatak

  • Resolution set to fixed
  • Status changed from new to closed

(In [3254]) Fixes #1289

Add Comment

Modify Ticket

Action
as closed .
as The resolution will be set. Next status will be 'closed'.
to The owner will be changed from ashwin_phatak. Next status will be 'closed'.
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.