Modify ↓
Opened 16 years ago
#3716 new defect
TicketBoxMacro does not obey trac permissions
Reported by: | Dalton Barreto | Owned by: | Shun-ichi Goto |
---|---|---|---|
Priority: | normal | Component: | TicketBoxMacro |
Severity: | normal | Keywords: | |
Cc: | Dalton Barreto | Trac Release: | 0.10 |
Description
On my trac enviroment, anonymnous users are allowed to see *only* the wiki. But I have TicketBoxMacro running on the wiki start page. And that's the problem.
When I open the wiki as a anonymous user, the macro shows all active tickets (result of report 1) even without the TICKET_VIEW permission.
I think TicketBoxMacro should not list any tickets if the user does not have the right permissions.
I'm using the macro from this link: http://trac-hacks.org/svn/ticketboxmacro/TicketBox.py
Attachments (0)
Note: See
TracTickets for help on using
tickets.