Hi all,

I can't get my permissions work as i want them to, and i think i've
missed something.

This is my trac.ini file, where i told it to use authzpolicy .. i have
two files, one for SVN and the other for Trac. I've tried to use one,
but no luck :(

[authz_policy]
authz_file = D:/workspace/trac/config/authzpolicy.conf

[components]
authz_policy = enabled

[trac]
authz_file = D:/workspace/subversion/config/authz
authz_module_name =
ignore_auth_case = false
permission_policies = AuthzPolicy, DefaultPermissionPolicy,
LegacyAttachmentPolicy
permission_store = DefaultPermissionStore

I have one user (cperez) and i want it to belong to a group
(ticketers) that has access to tickets only, so these is what i have
in my authzpolicy.conf file.

[groups]
ticketers = cperez
all=me
administrators = admin

[*]
@administrators = TRAC_ADMIN
@all = BROWSER_VIEW, LOG_VIEW, FILE_VIEW, CHANGESET_VIEW,
TICKET_ADMIN, MILESTONE_ADMIN, ROADMAP_ADMIN, REPORT_ADMIN,
WIKI_ADMIN, TIMELINE_VIEW, SEARCH_VIEW
@ticketers = REPORT_VIEW, TICKET_CREATE, TICKET_VIEW, TICKET_APPEND,
TICKET_CHGPROP
anonymous =
authenticated =
* =

When i try to see the wiki with this user, i can see it, althought i
don't want this user can read the wiki. Here are the logs:

No policy allowed cperez performing TRAC_ADMIN on None
No policy allowed cperez performing PERMISSION_GRANT on None
No policy allowed cperez performing PERMISSION_REVOKE on None
No policy allowed cperez performing TICKET_ADMIN on None
No policy allowed cperez performing EMAIL_VIEW on None
Retrieving session for ID 'cperez'
No policy allowed cperez performing REPORT_CREATE on <Resource
u'report:-1'>

I have not modified the default permissions using ' trac-admin /path/
to/projenv permission ...' because i thought that it shouldn't be
necesary as i've AuthzPolicy before DefaultPermissionPolicy.

I'm pretty sure i've missed something, but it's late now and i can't
see it .. any idea?

Best regards,
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to