Modify

Opened 5 years ago

Closed 5 years ago

#5374 closed defect (wontfix)

Anonymous history diff shows the ProtectedMacro part

Reported by: klaux Owned by: frayja
Priority: high Component: ProtectedMacro
Severity: major Keywords:
Cc: klaux1@… Trac Release: 0.11

Description

Ie.:

  • Wiki page
Public text 1
{{{
#!protected
User: foo
Pass: bar
}}}
Public text 2
  • Version

     
    11Public text 1 
     2{{{                                                 
     3#!protected                                         
     4User: foo 
     5Pass: bar 
     6}}} 
    27Public text 2 

Thx.

Attachments (0)

Change History (1)

comment:1 Changed 5 years ago by frayja

  • Resolution set to wontfix
  • Status changed from new to closed

The history diff is deeply embedded into Trac. This problem can't be fixed without modifying trac itself, and that can't be done from a plugin.

I suggest removing the TIMELINE_VIEW permission from anonymous users. Than they won't be able to see -any- diff, including the protected ones.

Unfortunately this is the best solution I have been able to find. Suggestions are welcome.

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.