> -----Original Message-----
> From: [email protected] On Behalf Of Brettschneider Falk
> Sent: 13 June 2012 14:35
> To: [email protected]
> Subject: [Trac] RE: removing sources access from the default 
> permission
> 
> Cooke, Mark wrote:
> > F@lk wrote:
> >
> > However, is it posisble we are confuing `anonymous` and 
> > `authenticated`?
> > What does this show:-
> >
> > trac-admin <repo> permission list authenticated
> 
> Listing the authenticated permissions gives a lot things 
> including BROWSER_VIEW. Furthermore the 
> "Admin"->"Permissions" web page shows all my users added to 
> "authenticated". It looks like:
> 
> Subject         Action
> ---------------------------
> anonymous               WIKI_VIEW
> authenticated   BROWSER_VIEW ... plus a lot more
> user1                   authenticated
> user2                   authenticated
> ...
> userN                   authenticated
> 
> But I thought that userX (who is not one of the authenticated 
> users) automatically gets anonymous-group permissions since 
> he is not added there at all. Though he can access the Trac 
> URL since Apache lets him in by SSPI Windows domain login control.

I think we have the problem here in a misunderstanding: your user will get 
`authenticated` (as will all of your users if you `Require valid-user` in 
apache).  `httpd` passes the user's ID through to Trac which then accepts your 
user as `authenticated` (by apache) and applies the permissions for that group.

In my setup, I revoke all `anonymous` and `authenticated` permissions and 
define my own groups (`gPigs` and `gChickens` for the agile amongst you...) 
just to avoid this sort of problem.

What you want to do is rename your current `authenticated` permissions but you 
cannot do that through the UI (you could if you use some SQL against the dB 
backend), so the easiest route is probably to dump the current permissions to a 
file and use that to build a bat to create a new group and ressign all your 
(known) users to this group instead of `authenticated`.

Hope that helps,

~ mark c

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.

Reply via email to