id,summary,reporter,owner,description,type,status,priority,component,severity,resolution,keywords,cc,release
5594,Respect Trac permissions,Ryan J Ollos,Bhuricha Deen Sethanandha,"I have a group setup with only the following permissions: TICKET_APPEND, TICKET_CREATE, TICKET_EDIT_CC, TICKET_MODIFY,TICKET_VIEW, TICKET_VIEW_SELF.  TICKET_VIEW_SELF is provided by the PrivateTicketsPlugin.

Users in this group can still navigate to /pdashboard.  They can see:

 * Ticket Summary (which should require at least TICKET_VIEW privilege, however it still displays even if I revoke TICKET_VIEW for this group)
 * Milestone summary (which should require MILESTONE_VIEW permissions).

Repository statistics renders as a blank graph (which makes me wonder which permissions are required for the graph to render; i did some testing, but couldn't figure this out).

Selecting '''Show Project Metrics''' results in ''ROADMAP_VIEW privileges are required to perform this operation'', which is the desired behavior.",defect,new,normal,TracMetrixPlugin,normal,,,,0.11