"D. Richard Hipp" <[email protected]> wrote:
> On Dec 31, 2009, at 10:28 AM, Jeremy Cowgar wrote:
> 
> This change makes it so that it is impossible to see the timeline  
> without first logging in as anonymous.  I consider that unacceptable.
> 
> The purpose of the "history" capability is to turn off hyperlinks -  
> nothing more.  The idea is that for user "nobody" (which is the user  
> that all spiders will have) none of the hyperlinks will be visible and  
> so msnbot and Googlebot won't burn through gigabytes of bandwidth  
> downloading diffs of every historical version of a project.
> 
> User "nobody" should be able to see the timeline.  They just shouldn't  
> have any hyperlinks on the timeline page.
> 

Ok, I see what you are saying. I wonder if the "history" capability would be 
better named as "show links" or something along those lines? To me the timeline 
shows history. The current use of "history" doesn't seem to be intuitive.

I see you made some changes in a more recent commit, what does your method do?

"Alternative implementation of timeline security changes - this implementation 
always shows the timeline link if it is applicable, even if the history 
capability is disabled."

Specifically, what do you mean always show the timeline link if it is 
applicable?

The final result I was after was to allow someone to view the timeline but not 
a certain part of it, mainly source code. In my particular situation I use 
fossil with some open source projects and also at work. I've not used the 
ticket system built into fossil with my work because I did not want other 
employees/co-workers to have access to the source code. So, with my change (and 
probably yours also) you have enough security control to show the timeline but 
depending on your security you may not see checkin history, wiki history or 
ticket history.

>From reading your diff it seems that yours does the same (and more eloquently) 
>but I don't understand what you mean always show the timeline.

Jeremy

_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to