wiki:SensitiveTicketsPlugin

Version 17 (modified by Steffen Hoffmann, 6 years ago) (diff)

extensive reordering of contents, new maintainer details to #9830

SensitiveTickets

Hide sensitive tickets with a checkbox.

Description

SensitiveTickets is a plugin that lets users mark tickets as "sensitive" with a checkbox on the ticket form. Sensitive tickets are viewable only to those with the SENSITIVE_VIEW permission.

Beware: Hooks that send mail on ticket changes will still send mail for sensitive tickets; this may not be what you want.

Examples

A user submits a security related ticket to a project's Trac, which is generally open to the public. They mark it as "Sensitive" so that only people in the internal team that deal with security issues can see the ticket.

A team uses Trac to handle its business development tasks, but wants to leave the record open for all. Some tasks, however--say, dealing with difficult clients--are sensitive. Those tickets are marked as sensitive and hidden to others but viewable by the business development team.

History/Related

The plugin is based on the example vulnerability_tickets.py but uses a checkbox instead of text in the summary or keywords to mark a ticket as sensitive.

See also: PrivateTicketsPlugin.

Configuration

To use this plugin you will have to edit your trac.ini file to use the new SenstiveTicketsPolicy permission policy, e.g.:

[components]
sensitivetickets.* = enabled

[trac]
permission_policies = SensitiveTicketsPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy

Needs an environment upgrade after enabling.

(TODO explain what LegacyAttachmentPolicy is, and why one should or should not include it.)

Bugs/Feature Requests

Existing bugs and feature requests for SensitiveTicketsPlugin are here.

If you have any issues, create a new ticket.

Source & Download

You can check out SensitiveTicketsPlugin from here using Subversion, or browse the source with Trac.

Download the zipped source from [download:sensitiveticketsplugin here].

Recent Changes

16892 by rjollos on 2017-10-16 23:59:38
TracSensitiveTickets 1.2.3dev: Bump version

TracSensitiveTickets 1.2.2 has been published to PyPI.

Refs #13297.

16891 by rjollos on 2017-10-16 23:58:02
TracSensitiveTickets 1.2.2dev: Fix failure with non-integer resource id

Refs #13297.

16890 by rjollos on 2017-10-16 23:46:46
sensitivetickets 0.24: Fix failure with non-integer resource id

Restore the 0.11 directory to the revision prior to
r11289, which should be compatible with Trac 0.11.6.

Refs #13297.

(more)

Author/Contributors

Author: sbenthall
Maintainer: dkgdkg
Contributors: k0s, obs