Opened 16 years ago

Last modified 15 years ago

#3835 closed defect

Correct permission for ticket modify — at Initial Version

Reported by: okamototk Owned by: Alec Thomas
Priority: normal Component: XmlRpcPlugin
Severity: major Keywords:
Cc: Trac Release: 0.11

Description

Hi,

XmlRpcPlugin needs TRAC_ADMIN permission for update ticket. However I think it should be TRAC_MODIFY permission. I attached the pacth. Please improve it.

Index: tracrpc/ticket.py =================================================================== --- tracrpc/ticket.py (revision 4361) +++ tracrpc/ticket.py (working copy) @@ -29,7 +29,7 @@

yield ('TICKET_VIEW', ((list, int),), self.getAvailableActions) yield ('TICKET_VIEW', ((list, int),), self.get) yield ('TICKET_CREATE', ((int, str, str), (int, str, str, dict), (int, str, str, dict, bool)), self.create)

  • yield ('TICKET_ADMIN', ((list, int, str), (list, int, str, dict), (list, int, str, dict, bool)), self.update)

+ yield ('TICKET_MODIFY', ((list, int, str), (list, int,str, dict), (list, int, str, dict, bool)), self.update)

yield ('TICKET_ADMIN', ((None, int),), self.delete) yield ('TICKET_VIEW', ((dict, int), (dict, int, int)), self.changeLog) yield ('TICKET_VIEW', ((list, int),), self.listAttachments)

Change History (0)

Note: See TracTickets for help on using tickets.