Hours permissions

[interstellar]

Implement permissions for TracHoursPlugin.

Permissions like HOURS_VIEW, HOURS_MANAGE, HOURS_ADMIN would be nice. And if a user has specific permissions, the hours navigation button would be visible or not.

Right now, if one (even anonymous) has a TICKET_VIEW permission, he can see all hours.

[bolsog@…]

even more problematic:

anonymous can view /hours/<ticket-num>
even if anonymous has NO rights at all.

[anonymous]

workaround - checks if user has TICKET_VIEW, else shows /hours - this checks for permissions

[anonymous]

please fix somehow.

[Carlos Jenkins Pérez]

Implementation of HOURS_VIEW feature.

[Carlos Jenkins Pérez]

I've implemented the feature HOURS_VIEW. I've appended the patch (revision 8601, 0.11 branch).

Now user must have HOURS_VIEW to view /hours paths. Also, the mainnav tab doesn't show if user doesn't have HOURS_VIEW too.

Cheers

[interstellar]

I've applied the patch​, but now the Cross-project hours feature doesn't show any hours.

Did anybody experience the same thing?

Replying to Havok:

I've implemented the feature HOURS_VIEW. I've appended the patch (revision 8601, 0.11 branch).

Now user must have HOURS_VIEW to view /hours paths. Also, the mainnav tab doesn't show if user doesn't have HOURS_VIEW too.

Cheers

[Carlos Jenkins Pérez]

I'm not using the Multiproject feature, but the patch should not be a problem, since it only provide an extra permission layer that the user need to pass in order to access the Hours views. Sure you granted the HOURS_VIEW permission to users?

Cheers

Replying to interstellar:

I've applied the patch​, but now the Cross-project hours feature doesn't show any hours.

Did anybody experience the same thing?

[interstellar]

Sure, I added HOURS_VIEW permission to authenticated group.

When I reverted hours.py to a version before your patch - cross-project hours started working again.

Replying to Havok:

I'm not using the Multiproject feature, but the patch should not be a problem, since it only provide an extra permission layer that the user need to pass in order to access the Hours views. Sure you granted the HOURS_VIEW permission to users?

Cheers

Replying to interstellar:

I've applied the patch​, but now the Cross-project hours feature doesn't show any hours.

Did anybody experience the same thing?

[Ryan J Ollos]

#8122 closed as a duplicate.

[Ryan J Ollos]

Reassigning ticket to new maintainer.

[Ryan J Ollos]

#8347 requests that anonymous users not be allowed to access the Hours page.