Opened 10 years ago

#3716 new defect

TicketBoxMacro does not obey trac permissions

Reported by: Dalton Barreto Owned by: Shun-ichi Goto
Priority: normal Component: TicketBoxMacro
Severity: normal Keywords:
Cc: Dalton Barreto Trac Release: 0.10


On my trac enviroment, anonymnous users are allowed to see *only* the wiki. But I have TicketBoxMacro running on the wiki start page. And that's the problem.

When I open the wiki as a anonymous user, the macro shows all active tickets (result of report 1) even without the TICKET_VIEW permission.

I think TicketBoxMacro should not list any tickets if the user does not have the right permissions.

I'm using the macro from this link:

Attachments (0)

Change History (0)

Modify Ticket

Change Properties
Set your email in Preferences
as new The owner will remain Shun-ichi Goto.

Add Comment

E-mail address and name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.