Plugin works correctly for logged-in users, but anonymous user (not logged in) can access the private page

[piotr@…]

Plugin works correctly for logged-in users, but anonymous user (not logged in) can access the private page. Using Trac 0.11. Maybe I missed a setting, but it is not apparent. For now I revoked WIKI_VIEW permission from the anonymous group. If it is solely my omission in the setup and not a bug, I apologize; but please let me know what the fix is.

Regards,

Piotr

[anonymous]

I got same error using Trac 0.11.

[anonymous]

Same problem here. Using Trac 0.11. Disabling WIKI_VIEW from the anonymous group is not a such a good option as TRAC is normally includes a public section.

[guillaumeh]

It's the same for me !

Trac 0.11.1, and unlogged user can see everything !

[anonymous]

I think I've fixed the bug locally by changing this line in api.py from:

if username == 'anonymous' or resource is None or resource.id is None:

to

if resource is None or resource.id is None:

I haven't tested all cases, but my configuration (where anonymous has WIKI_VIEW and authenticated has PRIVATE_VIEW_ALL) works as expected.

[anonymous]

The fix in the last post worked perfectly for me on Trac 0.11.5. That was a pretty annoying bug, thanks for the fix!

[anonymous]

Duplicate: See ticket:3194