Respect Trac permissions
|Reported by:||rjollos||Owned by:||rjollos|
Description (last modified by rjollos)
I have a group setup with only the following permissions:
- TICKET_VIEW_SELF (provided by the PrivateTicketsPlugin).
Users in this group can still navigate to /pdashboard. They can see:
- Ticket Summary (which should require at least TICKET_VIEW privilege, however it still displays even if I revoke TICKET_VIEW for this group)
- Milestone summary (which should require MILESTONE_VIEW permissions).
Repository statistics renders as a blank graph (which makes me wonder which permissions are required for the graph to render; i did some testing, but couldn't figure this out).
Selecting Show Project Metrics results in ROADMAP_VIEW privileges are required to perform this operation, which is the desired behavior.