Version 2 (modified by puffy, 11 years ago) (diff)


Role-Based Access Control for the Trac Wiki


WikiRBAC modifies the component to enforce Role-Based Access Control. Roles are configured as groups within the subversion authz file and ACLs are specified identically to subversion permissions, with the addition of 'c', 'd', and 'a' options, which control creation, deletion, and administration permissions respectively.

This patch has been written against Trac v0.9.2. See also AuthzWebadminPlugin

Bugs/Feature Requests

Existing bugs and feature requests for WikiRbacPatch are here.

If you have any issues, create a new ticket.


Download the zipped source from [download:wikirbacpatch here].


You can check out WikiRbacPatch from here using Subversion, or browse the source with Trac.


Install the patch.
Add the following to trac.ini's [wiki] section:
authz_svn_module_name = tracwiki
authorization_mode = require_all #(or 'require_one', or 'none' if you want RBAC disabled)

Just as an example, one might add to the subversion authz file (or set the authz_file directive in the wiki section to something appropriate):

example = mrfoo,mrsbaz
losers = somedude


  • = r

@example = a #give admin permissions
@losers = rwc #give the losers group permissions to read, edit, and create wiki pages.

Recent Changes

634 by puffy on 2006-04-09 21:08:54

Integrate heinlein@…'s modifications (see ticket #221) to get WikiRBAC to apply on > 0.9.2.

388 by puffy on 2006-01-20 20:41:21

Fix the calling semantics on WikiAuthorizer so it takes a permission system rather than a request.

382 by puffy on 2006-01-20 14:46:32

Initial import of the WikiRBAC patch.



Author: puffy