Jouvin wrote: > > http://trac.edgewall.org/wiki/TracFineGrainedPermissions describes the > fine-grained authorization. The example is: > > [wiki:wikist...@*] > * = WIKI_VIEW > > and the explanation says that "all versions of WikiStart" are readable > by anybody. > > Does it means there is a possibility to have only the last version > readable by, let say, anonymous. What would be the value to use in > this case? I tried to remove '@*' but this has no effect (you can see > all version by going to the History link). > >
The documentation states that `...@*` is added implicitly if the version is not specified, so the behavior you describe seems correct. This got me thinking about a configuration I have wanted to implement for some time, so I did some testing. >From the documentation, it seems as though it should be possible to restrict access to a specified version. For example, [wiki:wikist...@3] * = WIKI_VIEW [wiki:wikist...@*] * = seems like it should restrict access to version 3 of WikiStart. However, I can't seem to get this to work, and have never actually used this feature in the past, so I can't say for sure that it should work. Does it work for you? On the other hand, the following configuration allows access to all versions of WikiStart, [wiki:WikiStart] * = WIKI_VIEW [wiki:wikist...@*] * = So, it appears that the first match is used to grant access to wiki start, which appears to be consistent with the documentation. This confuses me even more, because it really seems like my first example should work and grant access to only version 3 of WikiStart. >From your question though, it seems like you would like to specify that the latest version is the only version that can be accessed, without having to hard-code the latest version into your authz_config file. I don't think this is presently possible, so you would most likely need to open an enhancement request. It seems like a good notation would be something like `...@head`. -- View this message in context: http://old.nabble.com/Fine-grained-authorization-syntax-tp27197836p27219558.html Sent from the Trac Users mailing list archive at Nabble.com. -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/trac-users?hl=en.
