I have been trying to get authz_policy working in my 0.11b1
installation, without much luck. I want anon users to have access to
wiki:WikiStart only.  To that end, I have removed all standard
permissions from anonymous, and added a very simple authz_policy
setup:
[wiki:[EMAIL PROTECTED]
* = WIKI_VIEW

I have a couple of issues, though.

First, while the code in authz_policy.py goes through a few hoops to
test authz_policy.conf for modification before each time it is used,
it is none the less parsed for every request.  I assume the intent is
not to test it for modification every use in a single request (which
is what happens) but once for a given request, and to have the parsed
file reused across requests when not modified.  Simply making the
authz_mtime and authz variables class will not work... you will run
into problems with multiple trac instances with their own authz files
due to tracs requirement to run all instances in the root python
interpreter. A class wide dict for those variables with the
authz_policy.conf full path as a key, maybe?

Second, I can't seem to get it to work!  All of my plumbing is in
place and working.  I've done some debugging...
When I  go to the /project root as anonymous, wiki:WikiStart is indeed
passed in, authz_policy does its magic, and anonymous gets to see the
page.
If I put in /project/wiki, or project/wiki/WikiStart (or indeed
project/wiki/AnyPage), the passed resource is only the realm 'wiki',
without an id.

I really want to authz_policy to meet my employers needs, and would
really appreciate some help.

Thanks,
Wayne


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to