tigefa4u projects Trac

PermissionPolicy: the !PermissionCache is again at the Request level

The Context only has a !PermissionCacheProxy for conveniently delegating calls to the actual cache. There, the permissions for the user are looked-up at most once for each context.

In order to differentiate among different "indirect" resources (e.g. attachments) that can share the same (realm,id), a new `Context.permid()` has been introduced. The default implementation should be enough to provide a unique key for the resource in the permission system. In the case of attachments for example, that key can be augmented by the parent context's key.

PermissionPolicy: several minor fixes and cleanups
- check for attachment replacement, by checking for both 'CREATE' and 'DELETE'; to make this easier, `perm.require` accepts a list of permissions
- use unqualified verbs for the wiki module
- display the Attach button on the wiki view when this is the only possible action

PermissionPolicy: as expected, the Context class can be easily used for describing "pseudo" resources

Example: for the !AuthzPolicy plugin (see sample-plugins/authz_policy.py), it is possible to configure the TracIni configuration view to be visible only to administrators, whereas the system information can be viewed by anyone.

{{{
[about:config]
@administrators = VIEW

[about:systeminfo]
* = VIEW
}}}

PermissionPolicy: merged latest changes from trunk [4590:4597/trunk]

Highlighters other than Pygments were broken when no annotations where used. This should fix #4505.

Fix patch renderer unit-test failures (accomodate line number anchors)

PermissionPolicy: clean-up Attachment module
- added an !AttachmentContext
- removed request related stuff from the Attachment data model class
- updated the attachment: TracLinks provider to use AttachmentContext
- updated WikiMacros to use AttachmentContext

Applied patch for #4558.

Simplify the about page: show system information and configuration all on the same page, ''if'' the user has `CONFIG_VIEW` permissions.

PermissionPolicy: second part of fine grained permissions for attachments
- converted the !AttachmentModule
- check for ATTACHMENT_DELETE, but dropped support for its equivalence with 'ADMIN' permission on the parent context; this eventually needs to be re-enabled.

The example plugin (sample-plugins/authz_policy.py) has been updated to accept simple verbs instead of full permission names (e.g. DELETE instead of ATTACHMENT_DELETE).