Jouvin wrote:
> 
> http://trac.edgewall.org/wiki/TracFineGrainedPermissions describes the
> fine-grained authorization. The example is:
> 
> [wiki:wikist...@*]
> * = WIKI_VIEW
> 
> and the explanation says that "all versions of WikiStart" are readable
> by anybody.
> 
> Does it means there is a possibility to have only the last version
> readable by, let say, anonymous. What would be the value to use in
> this case? I tried to remove '@*' but this has no effect (you can see
> all version by going to the History link).
> 
> 

The documentation states that `...@*` is added implicitly if the version is not
specified, so the behavior you describe seems correct.

This got me thinking about a configuration I have wanted to implement for
some time, so I did some testing.

>From the documentation, it seems as though it should be possible to restrict
access to a specified version.  For example,

[wiki:wikist...@3]
* = WIKI_VIEW

[wiki:wikist...@*]
* = 

seems like it should restrict access to version 3 of WikiStart.  However, I
can't seem to get this to work, and have never actually used this feature in
the past, so I can't say for sure that it should work.  Does it work for
you?

On the other hand, the following configuration allows access to all versions
of WikiStart,

[wiki:WikiStart]
* = WIKI_VIEW

[wiki:wikist...@*]
* =

So, it appears that the first match is used to grant access to wiki start,
which appears to be consistent with the documentation.  This confuses me
even more, because it really seems like my first example should work and
grant access to only version 3 of WikiStart.

>From your question though, it seems like you would like to specify that the
latest version is the only version that can be accessed, without having to
hard-code the latest version into your authz_config file.  I don't think
this is presently possible, so you would most likely need to open an
enhancement request.  It seems like a good notation would be something like
`...@head`.
-- 
View this message in context: 
http://old.nabble.com/Fine-grained-authorization-syntax-tp27197836p27219558.html
Sent from the Trac Users mailing list archive at Nabble.com.

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.


Reply via email to