On Fri, Jun 1, 2012 at 6:23 PM, Ron Wilson <[email protected]> wrote:

> If you clone the Fossil repository to your PC, you can view the raw
> SQL and other configuration details through the Fossil UI just like
> you can for your own projects.
>
>
Doh. That actually speaks for allowing users to see the report SQL if they
also have the clone rights (which almost every non-guest user does).

If there are no objections to that, i'll change the JSON API's reports to
allow reading them SQL when the user has the clone permission. Right now it
requires create/edit reports permissions, but now i see that that is
useless as any sort of security-related heuristic.

:-?

-- 
----- stephan beal
http://wanderinghorse.net/home/stephan/
http://gplus.to/sgbeal
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to