On Wed, May 10, 2017 at 1:33 AM toto200891 <[email protected]> wrote:
> Yes test is the trac-admin in my project. And toto does not have the > permission of TRAC ADMIN OR TICKET ADMIN and neither the anonymous nor the > authenticated have the TRAC ADMIN OR TICKET ADMIN permissions. Here is the > attched screenshot of the permission list > > Regards, > SF > Did you restart the web server after updating the plugin code? Let's revisit the debugging we did earlier. With the policy enabled, you should get the following when visiting a ticket the user should not be allowed to view (user is not reporter or owner of ticket): 01:20:15 Trac[main] DEBUG: Dispatching <RequestWithSession "GET '/ticket/1'"> 01:20:15 Trac[main] DEBUG: Chosen handler is <Component trac.ticket.web_ui.TicketModule> 01:20:15 Trac[session] DEBUG: Retrieving session for ID u'user3' 01:20:15 Trac[perm] DEBUG: No policy allowed user3 performing TICKET_ADMIN on <Resource u'ticket:1'> 01:20:15 Trac[perm] DEBUG: SupportDeskPolicy denies user3 performing TICKET_VIEW on <Resource u'ticket:1'> [...] and for a ticket the user is allowed to view, 01:21:58 Trac[main] DEBUG: Dispatching <RequestWithSession "GET '/ticket/10'"> 01:21:58 Trac[main] DEBUG: Chosen handler is <Component trac.ticket.web_ui.TicketModule> 01:21:58 Trac[session] DEBUG: Retrieving session for ID u'user3' 01:21:58 Trac[perm] DEBUG: No policy allowed user3 performing TICKET_ADMIN on <Resource u'ticket:10'> 01:21:58 Trac[perm] DEBUG: No policy allowed user3 performing TICKET_EDIT_CC on <Resource u'ticket:10'> 01:21:58 Trac[perm] DEBUG: No policy allowed user3 performing EMAIL_VIEW on None 01:21:58 Trac[perm] DEBUG: No policy allowed user3 performing TICKET_ADMIN on <Resource u'ticket:10@1'> - Ryan -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/trac-users. For more options, visit https://groups.google.com/d/optout.
