> -----Original Message----- > From: [email protected] On Behalf Of Brettschneider Falk > Sent: 13 June 2012 14:35 > To: [email protected] > Subject: [Trac] RE: removing sources access from the default > permission > > Cooke, Mark wrote: > > F@lk wrote: > > > > However, is it posisble we are confuing `anonymous` and > > `authenticated`? > > What does this show:- > > > > trac-admin <repo> permission list authenticated > > Listing the authenticated permissions gives a lot things > including BROWSER_VIEW. Furthermore the > "Admin"->"Permissions" web page shows all my users added to > "authenticated". It looks like: > > Subject Action > --------------------------- > anonymous WIKI_VIEW > authenticated BROWSER_VIEW ... plus a lot more > user1 authenticated > user2 authenticated > ... > userN authenticated > > But I thought that userX (who is not one of the authenticated > users) automatically gets anonymous-group permissions since > he is not added there at all. Though he can access the Trac > URL since Apache lets him in by SSPI Windows domain login control.
I think we have the problem here in a misunderstanding: your user will get `authenticated` (as will all of your users if you `Require valid-user` in apache). `httpd` passes the user's ID through to Trac which then accepts your user as `authenticated` (by apache) and applies the permissions for that group. In my setup, I revoke all `anonymous` and `authenticated` permissions and define my own groups (`gPigs` and `gChickens` for the agile amongst you...) just to avoid this sort of problem. What you want to do is rename your current `authenticated` permissions but you cannot do that through the UI (you could if you use some SQL against the dB backend), so the easiest route is probably to dump the current permissions to a file and use that to build a bat to create a new group and ressign all your (known) users to this group instead of `authenticated`. Hope that helps, ~ mark c -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/trac-users?hl=en.
