- priority: 5 --> 6
Hi,
Currently web.config file has all settings in one file, editable via admin panel.
So there is no distinction between settings typical for IT, like:
- connection string to database
- path for storing attachments on disk (not in database)
- settings for SMTP (to send e-mail notifications)
- e-mail addresses to send
And settings reponsible for configuring Bug Tracker itself, like:
- using Full Names
- enabling Voting
- enabling 'YourAttribute' custom filed
etc.
I would like to request to split web.config into two files, so user with admin privileges still has no full access to all configuration settings.
Such a user should have access only to the application settings, while "IT settings" should be in external file.
So, in bigger companies, or in enterprises, the IT department can be responsible for "their" settings, which should be hidden from 'business users'.
To do this, there is a a ConfigSource and File attribute:
http://www.nikhilk.net/Entry.aspx?id=158
http://msdn.microsoft.com/en-us/library/ms228154\(v=VS.80).aspx
This will help improve security without playing with complex mechanism of privileges (currently only 'user' and 'admin', plus possibility to add users to projects...
This would be definitely nice feature.
Kind Regards,
Mateusz