TAGS_MODIFY does not prevent modification of ticket keywords
|Reported by:||dkg-debian.org@…||Owned by:||athomas|
if TAGS_MODIFY is to be an effective permission, it should not only limit the ability to set tags on wiki pages. It should also limit the ability to set whichever of the ticket fields are parsed for the tags.
This probably means that TagsPlugin should implement an ITicketManipulator interface and filter out any attempts to modify either keywords or the items specified in the fields setting under [tags.ticket] in trac.ini if the user does not have the TAGS_MODIFY permission in the relevant context.
Future ITaggingSystemProvider authors should include similar precautions for their implementations.
Thanks for this great plugin! It's very useful. Sorry that i don't have a patch for you at the moment.