Modify ↓

Opened 18 years ago

Closed 17 years ago

#1289 closed defect (fixed)

[PATCH] Do not display 'Custom Query' for anon user, if it's not enable

Reported by: jorge.vargas+trac@… Owned by: ashwin_phatak
Priority: normal Component: BatchModifyPlugin
Severity: trivial Keywords:
Cc: Trac Release: 0.10

Description

Hi I'm running a closed trac (no permissions for anonymous) in which I installed batchmodify. One user pointed the link was showing which I believe is bad behavior.

To reproduce: take out the VIEW_TICKET permission from anonymous and go the main page, you should see the "Custom Query" tab but then it will ask for credentials, so this is not a security issue.

but the attached patch should fix it.

Attachments (1)

wrong_permission.diff​ (573 bytes) - added by jorge.vargas+trac@… 18 years ago.
a small patch to fix showing the batchmodify tab when credentials are not valid

Download all attachments as: .zip

Change History (2)

Changed 18 years ago by jorge.vargas+trac@…

Attachment: wrong_permission.diff​ added

a small patch to fix showing the batchmodify tab when credentials are not valid

comment:1 Changed 17 years ago by ashwin_phatak

Resolution: → fixed
Status: new → closed

(In [3254]) Fixes #1289

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain ashwin_phatak.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment

E-mail address and name can be saved in the Preferences.

Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.