Modify ↓

Opened 15 years ago

Last modified 10 years ago

#5594 new defect

Respect Trac permissions

Reported by: Ryan J Ollos Owned by:
Priority: high Component: TracMetrixPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11

Description (last modified by Ryan J Ollos)

I have a group setup with only the following permissions:

  • TICKET_APPEND
  • TICKET_CREATE
  • TICKET_EDIT_CC
  • TICKET_MODIFY
  • TICKET_VIEW
  • TICKET_VIEW_SELF (provided by the PrivateTicketsPlugin).

Users in this group can still navigate to /pdashboard. They can see:

  • Ticket Summary (which should require at least TICKET_VIEW privilege, however it still displays even if I revoke TICKET_VIEW for this group)
  • Milestone summary (which should require MILESTONE_VIEW permissions).

Repository statistics renders as a blank graph (which makes me wonder which permissions are required for the graph to render; i did some testing, but couldn't figure this out).

Selecting Show Project Metrics results in ROADMAP_VIEW privileges are required to perform this operation, which is the desired behavior.

Attachments (0)

Change History (7)

comment:1 Changed 15 years ago by Ryan J Ollos

Additionally, it would be nice if the TracMetrix button did not display on the main nav bar unless the user has ROADMAP_VIEW permissions. I have worked around this by implementing the permission via MenusPlugin, but it would be a nice feature to be included with TracMetrixPlugin.

Finally, I should have mentioned earlier that I'm using the latest version, 0.1.7, of TracMetrixPlugin.

comment:2 Changed 14 years ago by Ryan J Ollos

Owner: changed from Bhuricha Deen Sethanandha to Ryan J Ollos

comment:3 Changed 14 years ago by Ryan J Ollos

Description: modified (diff)

comment:4 Changed 14 years ago by Ryan J Ollos

Priority: normal → high

comment:5 Changed 14 years ago by Ryan J Ollos

Status: new → assigned

comment:6 Changed 13 years ago by Ryan J Ollos

Status: assigned → new

comment:7 Changed 10 years ago by Ryan J Ollos

Owner: Ryan J Ollos deleted

Modify Ticket

Change Properties
Set your email in Preferences
Action
as new The ticket will remain with no owner.

Add Comment

E-mail address and name can be saved in the Preferences.

Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.