Opened 8 years ago

#3716 new defect

TicketBoxMacro does not obey trac permissions

Reported by: daltonmatos Owned by: gotoh
Priority: normal Component: TicketBoxMacro
Severity: normal Keywords:
Cc: daltonmatos Trac Release: 0.10


On my trac enviroment, anonymnous users are allowed to see *only* the wiki. But I have TicketBoxMacro running on the wiki start page. And that's the problem.

When I open the wiki as a anonymous user, the macro shows all active tickets (result of report 1) even without the TICKET_VIEW permission.

I think TicketBoxMacro should not list any tickets if the user does not have the right permissions.

I'm using the macro from this link:

Attachments (0)

Change History (0)

Add Comment

Modify Ticket

as new The owner will remain gotoh.

E-mail address and user name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.