Menu

Commit [r4586]  Maximize  Restore  History

PermissionPolicy: first part of fine grained permissions for attachments

- use ATTACHMENT_CREATE and ATTACHMENT_VIEW
- the checks for ATTACHMENT_VIEW is now done directly in the `list_of_attachments` macro, not in the individual modules

The check for an attachment related permission is done by checking a specific verb against an 'attachmnent'-realm subcontext of the given context, e.g. `'CREATE' in context('attachment').perm`.

An example plugin demonstrating the new mechanism will follow shortly.

cboos 2007-01-17

changed /sandbox/security/templates/macros.html
changed /sandbox/security/templates/ticket_new.html
changed /sandbox/security/templates/ticket_view.html
changed /sandbox/security/templates/wiki_view.html
changed /sandbox/security/trac/ticket/web_ui.py
changed /sandbox/security/trac/wiki/web_ui.py
/sandbox/security/templates/macros.html Diff Switch to side-by-side view
Loading...
/sandbox/security/templates/ticket_new.html Diff Switch to side-by-side view
Loading...
/sandbox/security/templates/ticket_view.html Diff Switch to side-by-side view
Loading...
/sandbox/security/templates/wiki_view.html Diff Switch to side-by-side view
Loading...
/sandbox/security/trac/ticket/web_ui.py Diff Switch to side-by-side view
Loading...
/sandbox/security/trac/wiki/web_ui.py Diff Switch to side-by-side view
Loading...
Auth0 Logo