On 12/5/07, Stephen Moretti <[EMAIL PROTECTED]> wrote:
> ~sigh~ that simple...  Thank you Christian.
>
> No more error, but, unfortunately, the wiki pages are still accessible
> without the being logged in.
>
> The URL is trac/ENVNAME/wiki/SearchRankRulesDeveloper
> I've also got wiki urls like this :
> /trac/ENVNAME/wiki/SUBFOLDER/ApplicationLayoutDeveloper
>
> Another entry in the authzpolicy.conf file is :
> [wiki:[EMAIL PROTECTED]
> @Admin = WIKI_VIEW, WIKI_CREATE, WIKI_MODIFY, WIKI_DELETE
> @Developer = WIKI_VIEW, WIKI_CREATE, WIKI_MODIFY
> * =

This is due to changes to the plugin. The new behaviour is this:

  foo = WIKI_VIEW

Will *add* this permission to foo.


  foo = !WIKI_VIEW

Will *remove* this permission from foo. There is no way that I'm aware
of to *set* a list of permissions.

I personally much preferred the previous behaviour.

For your example I believe you now need:

  [wiki:[EMAIL PROTECTED]
  @Admin = WIKI_VIEW, WIKI_CREATE, WIKI_MODIFY, WIKI_DELETE
  @Developer = WIKI_VIEW, WIKI_CREATE, WIKI_MODIFY
  * = !WIKI_VIEW, !WIKI_CREATE, !WIKI_MODIFY, !WIKI_DELETE

etc.

> That should be ok, right?
>
> Anyway I can tell if the authz policy is actually being called and if its
> matching/missing?

If you enable debug logging it should log as it checks each permission,
though not the outcome. Only denies are currently logged.

-- 
Evolution: Taking care of those too stupid to take care of themselves.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to