On Wed, Jun 6, 2012 at 10:00 AM, Jeremy Anderson <[email protected]> wrote:

> Thanks for the tip... although I'm curious now what security is applied to
> the RSS feed. Can anyone view it, or can it be locked down? Which 'user'
> controls access to it (i assume 'anonymous'?).


>From rss.c:

 if( !g.perm.Read && !g.perm.RdTkt && !g.perm.RdWiki ){
    return;
  }

so anyone with "read" (checkout), read-ticket, or read-wiki perms can read
the RSS. i see now that the RSS output is shaped slightly differently
depending on user permissions, though. e.g. if the user has no read-ticket
perms than tickets are excluded from the results.



-- 
----- stephan beal
http://wanderinghorse.net/home/stephan/
http://gplus.to/sgbeal
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to