Opened 15 years ago
Last modified 9 years ago
#5594 new defect
Respect Trac permissions — at Initial Version
Reported by: | Ryan J Ollos | Owned by: | Bhuricha Deen Sethanandha |
---|---|---|---|
Priority: | high | Component: | TracMetrixPlugin |
Severity: | normal | Keywords: | |
Cc: | Trac Release: | 0.11 |
Description
I have a group setup with only the following permissions: TICKET_APPEND, TICKET_CREATE, TICKET_EDIT_CC, TICKET_MODIFY,TICKET_VIEW, TICKET_VIEW_SELF. TICKET_VIEW_SELF is provided by the PrivateTicketsPlugin.
Users in this group can still navigate to /pdashboard. They can see:
- Ticket Summary (which should require at least TICKET_VIEW privilege, however it still displays even if I revoke TICKET_VIEW for this group)
- Milestone summary (which should require MILESTONE_VIEW permissions).
Repository statistics renders as a blank graph (which makes me wonder which permissions are required for the graph to render; i did some testing, but couldn't figure this out).
Selecting Show Project Metrics results in ROADMAP_VIEW privileges are required to perform this operation, which is the desired behavior.
Note: See
TracTickets for help on using
tickets.