id,summary,reporter,owner,description,type,status,priority,component,severity,resolution,keywords,cc,release 6278,improper handling of groups,csalgau-th@…,Noah Kantrowitz,"Unless I incorrectly understand Trac permission management, a permission action is restricted to uppercase only, while a permission group is forced to not be uppercase only. This means you can have a group called TICKET_modify and give it TICKET_MODIFY rights. The current revision of PrivateTicketsPlugin incorrectly considers groups as lowercase. revision 3760, line 125: if subject in groups and action.islower() and action not in groups: tests if the current action is lowercase, which excludes groups containing uppercase characters",defect,closed,normal,PrivateTicketsPlugin,normal,duplicate,,,0.11