Modify

Opened 6 years ago

Closed 5 years ago

#3835 closed defect (duplicate)

Correct permission for ticket modify

Reported by: okamototk Owned by: athomas
Priority: normal Component: XmlRpcPlugin
Severity: major Keywords:
Cc: Trac Release: 0.11

Description (last modified by osimons)

Hi,

XmlRpcPlugin needs TRAC_ADMIN permission for update ticket. However I think it should be TRAC_MODIFY permission. I attached the pacth. Please improve it.

  • tracrpc/ticket.py

     
    2929        yield ('TICKET_VIEW', ((list, int),), self.getAvailableActions) 
    3030        yield ('TICKET_VIEW', ((list, int),), self.get) 
    3131        yield ('TICKET_CREATE', ((int, str, str), (int, str, str, dict), (int, str, str, dict, bool)), self.create) 
    32         yield ('TICKET_ADMIN', ((list, int, str), (list, int, str, dict), (list, int, str, dict, bool)), self.update) 
     32        yield ('TICKET_MODIFY', ((list, int, str), (list, int,str, dict), (list, int, str, dict, bool)), self.update) 
    3333        yield ('TICKET_ADMIN', ((None, int),), self.delete) 
    3434        yield ('TICKET_VIEW', ((dict, int), (dict, int, int)), self.changeLog) 
    3535        yield ('TICKET_VIEW', ((list, int),), self.listAttachments) 

Attachments (0)

Change History (2)

comment:1 Changed 6 years ago by seltmann@…

would be nice for me too

comment:2 Changed 5 years ago by osimons

  • Description modified (diff)
  • Resolution set to duplicate
  • Status changed from new to closed

Closing as duplicate of #3642.

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.