Modify

Opened 6 years ago

#3716 new defect

TicketBoxMacro does not obey trac permissions

Reported by: daltonmatos@… Owned by: gotoh
Priority: normal Component: TicketBoxMacro
Severity: normal Keywords:
Cc: daltonmatos@… Trac Release: 0.10

Description

On my trac enviroment, anonymnous users are allowed to see *only* the wiki. But I have TicketBoxMacro running on the wiki start page. And that's the problem.

When I open the wiki as a anonymous user, the macro shows all active tickets (result of report 1) even without the TICKET_VIEW permission.

I think TicketBoxMacro should not list any tickets if the user does not have the right permissions.

I'm using the macro from this link: http://trac-hacks.org/svn/ticketboxmacro/TicketBox.py

Attachments (0)

Change History (0)

Add Comment

Modify Ticket

Action
as new The owner will remain gotoh.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.