On Wed, Feb 4, 2009 at 9:50 AM, Flatfender <[email protected]> wrote: > On Tue, Feb 3, 2009 at 5:58 PM, cambo_frog <[email protected]> wrote: >> >> Hi All,
Hello ... >> I cannot add permissions to the trac projects parent directory (E:/ >> trac-projects). No ... >> I guess that's because the parent directory doesn't contain a trac >> environment, ;) >> but is there any way of adding permissions to all >> projects under TracEnvParentDir (E:/trac-projects) or do all >> permissions have to be set per project? Directly, well ... no. The idea that comes into my mind is as follows : - You should be using MS AD (isn't it ? ...) if so group the users (I am not very sure about how ... but anyway ... I think MS AD should provide a way -I insist I don't know it so ... research- some kind of user interface or alike ... ;) in as many groups as you need ... - Configure Trac so as to integrate user login with MS AD (nowadays I do it using Apache mod_ldap + mod_authz_ldap ... ;) - There is a plugin for Trac to use MSAD (i.e. LDAP ;) groups as if they were regular groups ... Install it ... - For better maintainance and low admin effort and synchronization ... share the plugins dir (... see option in trac.ini ;) so that information about groups be available at creation time ... - The only thing that's missing in all this reasoning is how to share group permissions (... I mean, the mapping from groups to Trac actions e.g. @admin -> TRAC_ADMIN ;) ... but perhaps (... research ;) you could employ some kind of Authz permission system so that you can specify your policy and store such permissions in a file (... or anything you can share between projects ... ) ... and if the same file (or sequivalent ...) is specified as a config option, well, then you are actually sharing your permissions policy with (... in theory ...) low maintainance effort. Anyway ... these are only ideas ... you should research and be aware about the details ... and I could be wrong at some point ... these are nothing but suggestions ... I have never done something like this before ... but anyway ... Pls let us know about your research ... this is an interesting and useful use case ... ;) > Not that I'm aware of Trac-Admin needs an environment passed to it, > you could probably right a script that wraps your environments in a > loop and iterate through them. > Ummm ... maybe a lot of maintainance ... effort and perhaps errors ... IMO ... besides a lot of duplicated data (i.e. permissions ) ... :( But anyway ... its just a hint ... ;) -- Regards, Olemis. Blog ES: http://simelo-es.blogspot.com/ Blog EN: http://simelo-en.blogspot.com/ Featured article: --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/trac-users?hl=en -~----------~----~----~----~------~----~------~--~---
