Modify ↓

Opened 15 years ago

Closed 7 years ago

Last modified 7 years ago

#4813 closed enhancement (wontfix)

Add an attachment ATTACHMENT_VIEW permission

Reported by: villalba.martin@… Owned by: anybody
Priority: normal Component: Request-a-Hack
Severity: minor Keywords:
Cc: Trac Release: 0.11

Description

Trac is a great software for tech support (at least in my company). However, when customers fill a bug report in our system, they must attach a dump of their data. This dump is usually confidential, thus requiring some sort of restriction about who can view it. By adding some sort of "ATTACHMENT_VIEW" permission, a user could be allowed (or not) to see attachments. That way, developers would be given permission to view attachments, while users wouls be allowed only to upload them.

Attachments (0)

Change History (3)

comment:1 Changed 15 years ago by Ryan J Ollos

Owner: changed from anybody to Ryan J Ollos
Status: new → assigned
Summary: Attachment download restriction → ATTACHMENT_VIEW permission

This feature would probably be most appropriately implemented in Trac core. I suggest opening a ticket on ​Edgewall. Following the existing permissions schema, the permission would be appropriately named ATTACHMENT_VIEW.

comment:2 Changed 14 years ago by Ryan J Ollos

Owner: changed from Ryan J Ollos to anybody
Status: assigned → new
Summary: ATTACHMENT_VIEW permission → Add an attachment ATTACHMENT_VIEW permission

comment:3 Changed 7 years ago by Ryan J Ollos

Resolution: → wontfix
Status: new → closed

Better suggestion: write a custom permission policy that check user and ticket attributes before deciding whether to deny ATTACHMENT_VIEW permission. Place the permission policy before LegacyAttachmentPolicy in the list of permission_policies. See resources listed in comment:2:ticket:6913 for details on writing a custom permission policy.

Version 0, edited 7 years ago by Ryan J Ollos (next)

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain anybody.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment

E-mail address and name can be saved in the Preferences.

Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.