[PATCH] Do not display 'Custom Query' for anon user, if it's not enable
|Reported by:||jorge.vargas@…||Owned by:||ashwin_phatak|
Hi I'm running a closed trac (no permissions for anonymous) in which I installed batchmodify. One user pointed the link was showing which I believe is bad behavior.
To reproduce: take out the VIEW_TICKET permission from anonymous and go the main page, you should see the "Custom Query" tab but then it will ask for credentials, so this is not a security issue.
but the attached patch should fix it.