Modify

Opened 8 years ago

Closed 7 years ago

#6278 closed defect (duplicate)

improper handling of groups

Reported by: csalgau-th@… Owned by: Noah Kantrowitz
Priority: normal Component: PrivateTicketsPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11

Description

Unless I incorrectly understand Trac permission management, a permission action is restricted to uppercase only, while a permission group is forced to not be uppercase only. This means you can have a group called TICKET_modify and give it TICKET_MODIFY rights. The current revision of PrivateTicketsPlugin incorrectly considers groups as lowercase. revision 3760, line 125: if subject in groups and action.islower() and action not in groups: tests if the current action is lowercase, which excludes groups containing uppercase characters

Attachments (1)

policy.patch (710 bytes) - added by csalgau-th@… 8 years ago.
proposed fix. winmerge diff

Download all attachments as: .zip

Change History (3)

Changed 8 years ago by csalgau-th@…

Attachment: policy.patch added

proposed fix. winmerge diff

comment:1 Changed 7 years ago by Ryan J Ollos

Duplicate of #3222.

comment:2 Changed 7 years ago by Ryan J Ollos

Resolution: duplicate
Status: newclosed

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Noah Kantrowitz.
The resolution will be deleted.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.