Opened 16 years ago
Last modified 16 years ago
#6806 new defect
anonymous user can't view unprotected image file without PROTECTED_VIEW permission
| Reported by: | Owned by: | frayja | |
|---|---|---|---|
| Priority: | normal | Component: | ProtectedMacro |
| Severity: | major | Keywords: | |
| Cc: | Trac Release: | 0.11 |
Description
On Trac 0.11.7, anonymous user cannot view Images linked to a file in the repository. I only got it working by giving the anonymous user the PROTECTED_VIEW permission but this defeats the purpose of having protected sections.
My wiki markup is below:
= Overview =
[[Image(source:/docs/design/collage.jpg, link=, alt="", title="")]]
[[BR]]
Some Description
[[BR]]
= Development =
{{{
#!protected
* [wiki:TheIdea The Idea]
}}}
* [query:status=new|assigned|reopened Active Tickets]
Attachments (0)
Change History (2)
comment:1 follow-up: 2 Changed 16 years ago by
comment:2 Changed 16 years ago by
Yup, you understood correctly. When I try with an image from disk it works for both protected and unprotected! Sample below:
[[Image(htdocs:image.jpg)]]
Replying to anonymous:
So you are saying that the image (code below) is not shown when the viewing user does not have the PROTECTED_VIEW permission? Even though the
[[IMAGE...]]is outside the protected section?
[[Image(source:/docs/design/collage.jpg, link=, alt="", title="")]]
Can you check the same thing with an image directly from disk? For both a protected and a non-protected section. For example: put a file (image.jpg) in the trac/htdocs directory and try the following:
[[Image(//image.jpg)]]



So you are saying that the image (code below) is not shown when the viewing user does not have the PROTECTED_VIEW permission? Even though the
[[IMAGE...]]is outside the protected section?Can you check the same thing with an image directly from disk? For both a protected and a non-protected section. For example: put a file (image.jpg) in the trac/htdocs directory and try the following: