Modify ↓
      
        Opened 17 years ago
#3716 new defect
TicketBoxMacro does not obey trac permissions
| Reported by: | Dalton Barreto | Owned by: | Shun-ichi Goto | 
|---|---|---|---|
| Priority: | normal | Component: | TicketBoxMacro | 
| Severity: | normal | Keywords: | |
| Cc: | Dalton Barreto | Trac Release: | 0.10 | 
Description
On my trac enviroment, anonymnous users are allowed to see *only* the wiki. But I have TicketBoxMacro running on the wiki start page. And that's the problem.
When I open the wiki as a anonymous user, the macro shows all active tickets (result of report 1) even without the TICKET_VIEW permission.
I think TicketBoxMacro should not list any tickets if the user does not have the right permissions.
I'm using the macro from this link: http://trac-hacks.org/svn/ticketboxmacro/TicketBox.py
Attachments (0)
Note: See
        TracTickets for help on using
        tickets.
    


