Opened 8 years ago
TicketBoxMacro does not obey trac permissions
|Reported by:||daltonmatos||Owned by:||gotoh|
On my trac enviroment, anonymnous users are allowed to see *only* the wiki. But I have TicketBoxMacro running on the wiki start page. And that's the problem.
When I open the wiki as a anonymous user, the macro shows all active tickets (result of report 1) even without the TICKET_VIEW permission.
I think TicketBoxMacro should not list any tickets if the user does not have the right permissions.
I'm using the macro from this link: http://trac-hacks.org/svn/ticketboxmacro/TicketBox.py