On Fri, Dec 5, 2014 at 9:12 AM, Aikido Guy <[email protected]> wrote:
> > https://groups.google.com/d/msg/trac-users/S_m1RxlwiIc/-JTLUoG4Ec4J wrote: > >> As your boss or yourself, what it is really worth. > > Umm... yes, this feature is really worth it for me/us. Nothing about > projects should be shown to a user without at least WIKI_VIEW privilege in > the Trac environment under consideration. I am currently ok if a user can > guess a project's URL and a WIKI_VIEW access denied message is shown, but I > am not ok if a user sees all projects in the "Available Projects" list > because then they learn about the existence of a project which we want to > make "harder than easy to do" :) > Just to be sure, you have a multiproject - multienvironment setup and you are concerned about users seeing the page that displays "Available Projects" when you navigate to the base URL? I haven't tried this, but it looks like you could probably just use a custom template that doesn't list the projects: http://trac.edgewall.org/wiki/TracInterfaceCustomization#ProjectList -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/trac-users. For more options, visit https://groups.google.com/d/optout.
