id	summary	reporter	owner	description	type	status	priority	component	severity	resolution	keywords	cc	release
5594	Respect Trac permissions	Ryan J Ollos	Ryan J Ollos	"I have a group setup with only the following permissions:  
 * TICKET_APPEND
 * TICKET_CREATE
 * TICKET_EDIT_CC
 * TICKET_MODIFY
 * TICKET_VIEW
 * TICKET_VIEW_SELF (provided by the PrivateTicketsPlugin).

Users in this group can still navigate to /pdashboard.  They can see:

 * Ticket Summary (which should require at least TICKET_VIEW privilege, however it still displays even if I revoke TICKET_VIEW for this group)
 * Milestone summary (which should require MILESTONE_VIEW permissions).

Repository statistics renders as a blank graph (which makes me wonder which permissions are required for the graph to render; i did some testing, but couldn't figure this out).

Selecting '''Show Project Metrics''' results in ''ROADMAP_VIEW privileges are required to perform this operation'', which is the desired behavior."	defect	new	normal	TracMetrixPlugin	normal				0.11