Thanks Sriram.
When I remove the default tag in internalsecurity, I then lose access
to the unsecure project by anonymous (unauthenticated) users. The
project is listed on the dashboard but going to that project page
gives an error. I tried the following setting for the unsecure project
with no success either:

      <security type="defaultProjectSecurity" defaultRight="Allow"
guest="*">
      </security>

Also, removing the default tag does not resolve the issue of the
secure project being displayed to all users if one authorized user is
logged in somewhere.

Brian

On Mar 23, 7:30 pm, Sriram <[email protected]> wrote:
> hi bbaltz,
>
> I think the problem lies in the "defaults" tag in "internalSecurity".
> I suggest you to remove the defaults tag and include the security for
> each project in the project tag. So that we have more control over
> which projects have access to whom including what they can do. Below
> is an example of how I used security in one of my projects.
>
> <security type="defaultProjectSecurity" defaultRight="Deny">
>       <permissions>
>           <rolePermission name="Developers" ref="Developers"
> forceBuild="Allow"/>
>       </permissions>
>     </security>
>
> Let me know if this fixed your issue.
>
> Thanks,
> Sriram.

To unsubscribe from this group, send email to 
ccnet-user+unsubscribegooglegroups.com or reply to this email with the words 
"REMOVE ME" as the subject.

Reply via email to