Simon Brunning wrote: > I'm currently evaluating open source defect trackers for my company. > Trac's currently in pole position because of it's Subversion > integration, its ease of installation (using Buildix), and 'cos it's in > Python. > > There's one capability that we need that I'm not sure that Trac can > currently fulfil, though. We have a number of clients, and we want all > of them to be able to create and review their own tickets without the > capability of seeing one anothers'. I've seen the Permission Policy > page - <http://trac.edgewall.org/wiki/PermissionPolicy) - but I'm not > sure if this will allow us to do what we want, or whether this feature > is present in the currently released version of Trac. > > I'm a Python user, so I'm happy to get my hands dirty if it'll help...
I put together a patch for 0.10.3 that I think is what you are looking for -- it is based on the WikiRbacPatch at TracHack : http://trac-hacks.org/wiki/WikiRbacPatch My patch takes the concepts and authz authorization code from the WikiRbacPatch and modifies the ticket / timeline / query system to assign fine-grained authz access rights by Component (the Component is used in place of the path). There are currently some restrictions however -- if users should not even be allowed to see ticket titles for tickets to which they do not have view access, then those users must be restricted to the ticket system. They cannot currently use much of the other functionality of Trac e.g. SEARCH_VIEW, REPORT_VIEW, etc. because those views can show the users the titles of other tickets (though the permission system will prevent them from actually opening the ticket). However, you can use the wiki -- in combination with the WikiRbacPatch, you can set up "protected" writable areas in the wiki specific to component, and common areas that are read-only. If you are interested, let me know and I'll try to pull together the patches for you. I'd also be interested to learn how you eventually accomplish this, if you go another route. Cheers, Raman --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Trac Users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/trac-users?hl=en -~----------~----~----~----~------~----~------~--~---
