Simen Haugen wrote:
>> Without commit access/ability to login to Trac, you can still do 
> almost everything in Trac that authenticated users can do [snip]
> 
> Doesn't seem like anonymous has these rights (even if I fill out info in
> settings). I can create tickets, but not comment or attach to existing
> tickets.

Oops, my fault. Earlier this week when dealing with the spam, I removed 
TICKET_MODIFY from anonymous, because that would solve two issues:

1) spammers changing ticket fields.
2) nonauthenticated users changing ticket fields (such as closing a ticket)

I really didn't think it through, and just assumed that this wouldn't 
take away the ability to comment on tickets. Too bad the permissions 
aren't as fine-grained as they probably should be.

Ok, I've re-enabled TICKET_MODIFY for anonymous, so you should be good 
to go.

Regarding concerns regarding spamming and non-auth closing tickets, 
we'll notice it when it happens and I have developed a tool to revert 
any ticket change, so it'll be fixed fast.


> I don't feel I know dabo well enough to make changes to the tree other
> than small bugfixes, so commit access isn't necessary. I'll just
> continue to post on the dev list.

Let me know when you feel differently, and I'll add you to the 
authenticated list!



-- 
pkm ~ http://paulmcnett.com


_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://leafe.com/mailman/listinfo/dabo-dev
Searchable Archives: http://leafe.com/archives/search/dabo-dev
This message: http://leafe.com/archives/byMID/dabo-dev/[EMAIL PROTECTED]

Reply via email to