Add an attachment ATTACHMENT_VIEW permission

[villalba.martin@…]

Trac is a great software for tech support (at least in my company). However, when customers fill a bug report in our system, they must attach a dump of their data. This dump is usually confidential, thus requiring some sort of restriction about who can view it. By adding some sort of "ATTACHMENT_VIEW" permission, a user could be allowed (or not) to see attachments. That way, developers would be given permission to view attachments, while users wouls be allowed only to upload them.

[Ryan J Ollos]

This feature would probably be most appropriately implemented in Trac core. I suggest opening a ticket on ​Edgewall. Following the existing permissions schema, the permission would be appropriately named ATTACHMENT_VIEW.

[Ryan J Ollos]

Better suggestion: write a custom permission policy that checks the user and ticket attributes before deciding whether to deny ATTACHMENT_VIEW permission. Place the permission policy before LegacyAttachmentPolicy in the list of permission_policies. See resources listed in comment:2:ticket:6913 for details on writing a custom permission policy.