Remy,

Ok we kind of wrote at the same time here. Thanks for updating the
documentation 2 last things:

 * Following your advice given in
http://trac.edgewall.org/wiki/TracUpgrade#Auhtzpermissionchecking
will remove the "Browse Source" button for anonymous users. Making it
a bit hard to find the source ;)

 * Can you confirm that AuthzPolicy is obsoleted by AuthzSourcePolicy
and therefore can be removed from permission_policies completely?

/HeX

On 4 Aug, 10:36, Remy Blank <remy.bl...@pobox.com> wrote:
> HeX wrote:
> > This is exactly the setup I have and what I'm on about because exactly
> > THIS DOES NOT WORK in 0.12 any more.
>
> Really?
>
> > On the other hand, denying, e.g., anonymous, BROWSER_VIEW will lead to
> > anonymous not being able to browse the source AT ALL. No matter what
> > authz_file says (the authz_file is, again, simply ignored by Trac
> > 0.12) Trac wouldn't know that anonymous users should get the "Browse
> > Source" button or be able to access foo/Browser.
>
> Well, I have this exact setup here, and it's been working fine for
> weeks. Did you add AuthzSourcePolicy to [trac] permission_policies, as
> instructed in... well, nowhere, actually, not even the API changes
> document. Let me fix that...
>
> Here you go:
>
>  http://trac.edgewall.org/wiki/TracUpgrade#Auhtzpermissionchecking
>
> Oh, actually, it's hidden in the help text for [trac] authz_file, but
> that's probably not acceptable :)
>
> -- Remy
>
>  signature.asc
> < 1 KVisLast ned

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Development" group.
To post to this group, send email to trac-...@googlegroups.com.
To unsubscribe from this group, send email to 
trac-dev+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/trac-dev?hl=en.

Reply via email to