Opened 14 years ago

Closed 13 years ago

#6278 closed defect (duplicate)

improper handling of groups

Reported by: csalgau-th@… Owned by: Noah Kantrowitz
Priority: normal Component: PrivateTicketsPlugin
Severity: normal Keywords:
Cc: Trac Release: 0.11


Unless I incorrectly understand Trac permission management, a permission action is restricted to uppercase only, while a permission group is forced to not be uppercase only. This means you can have a group called TICKET_modify and give it TICKET_MODIFY rights. The current revision of PrivateTicketsPlugin incorrectly considers groups as lowercase. revision 3760, line 125: if subject in groups and action.islower() and action not in groups: tests if the current action is lowercase, which excludes groups containing uppercase characters

Attachments (1)

policy.patch (710 bytes) - added by csalgau-th@… 14 years ago.
proposed fix. winmerge diff

Download all attachments as: .zip

Change History (3)

Changed 14 years ago by csalgau-th@…

Attachment: policy.patch added

proposed fix. winmerge diff

comment:1 Changed 13 years ago by Ryan J Ollos

Duplicate of #3222.

comment:2 Changed 13 years ago by Ryan J Ollos

Resolution: duplicate
Status: newclosed

Modify Ticket

Change Properties
Set your email in Preferences
as closed The owner will remain Noah Kantrowitz.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment

E-mail address and name can be saved in the Preferences.

Note: See TracTickets for help on using tickets.