trac seems to be ignoring my permissions.  I just upgrade trac .10 to .
11.2.1. I am using mod_python, and the TracAccountManager 0.2.1dev-
r4679 plugin.

I am able to login, and the wiki shows me as logged in.  Unfortunately
all the the privileges I've applied are ignored and that the only way
that a user can see anything is if I grant permissions to the
anonymous user.  I am thoroughly confused as to why this is happening.

>From trac-admin the permissions for this user, johnb, are listed as

johnb BROWSER_VIEW
johnb CHANGESET_VIEW
johnb CONFIG_VIEW
johnb EMAIL_VIEW
johnb FILE_VIEW
johnb LOG_VIEW
johnb MILESTONE_ADMIN
johnb MILESTONE_CREATE
johnb MILESTONE_DELETE
johnb MILESTONE_MODIFY
johnb MILESTONE_VIEW
johnb PERMISSION_ADMIN
johnb PERMISSION_GRANT
johnb PERMISSION_REVOKE
johnb ROADMAP_ADMIN
johnb ROADMAP_VIEW
johnb SEARCH_VIEW
johnb TICKET_ADMIN
johnb TICKET_APPEND
johnb TICKET_CHGPROP
johnb TICKET_CREATE
johnb TICKET_EDIT_CC
johnb TICKET_EDIT_DESCRIPTION
johnb TICKET_MODIFY
johnb TICKET_VIEW
johnb  TIMELINE_VIEW
johnb  TRAC_ADMIN
johnb  WIKI_ADMIN
johnb  WIKI_CREATE
johnb  WIKI_DELETE
johnb  WIKI_MODIFY
johnb  WIKI_VIEW

Yet, being logged in this user only has the same rights as the
anonymous user.
Why?

Here is a DEBUG session of that user logging in

2009-01-07 11:50:05,906 Trac[main] DEBUG: Dispatching <Request "POST
u'/login'">
2009-01-07 11:50:05,911 Trac[session] DEBUG: Retrieving session for ID
u'[email protected]'
2009-01-07 11:50:05,913 Trac[chrome] DEBUG: Prepare chrome data for
request
2009-01-07 11:50:05,945 Trac[main] DEBUG: Dispatching <Request "GET
u'/'">
2009-01-07 11:50:05,951 Trac[session] DEBUG: Retrieving session for ID
u'johnb'
2009-01-07 11:50:05,953 Trac[chrome] DEBUG: Prepare chrome data for
request
2009-01-07 11:50:05,954 Trac[main] DEBUG: 179 unreachable objects
found.
2009-01-07 11:50:05,967 Trac[perm] DEBUG: No policy allowed anonymous
performing WIKI_VIEW on <Resource u'wiki:WikiStart'>
2009-01-07 11:50:05,968 Trac[main] WARNING: 403 Forbidden (WIKI_VIEW
privileges are required to perform this operation on WikiStart)
2009-01-07 11:50:06,051 Trac[perm] DEBUG: No policy allowed anonymous
performing EMAIL_VIEW on None
2009-01-07 11:50:06,054 Trac[perm] DEBUG: No policy allowed anonymous
performing SEARCH_VIEW on None
2009-01-07 11:50:06,093 Trac[main] DEBUG: 1332 unreachable objects
found.

And here is how my INI file is configured
[account-manager]
htdigest_realm = Trac
password_file = /var/trac/auth/.htdigest
password_store = HtDigestStore

[attachment]
max_size = 8388608
render_unsafe_content = false

[browser]
downloadable_paths = /trunk, /branches/*, /tags/*
hide_properties = svk:merge
render_unsafe_content = false

[changeset]
max_diff_bytes = 10000000
max_diff_files = 0
wiki_format_messages = true

[components]
trac.web.auth.loginmodule = disabled
webadmin.* = enabled
acct_mgr.* = enabled
acct_mgr.web_ui.RegistrationModule = disabled
redirect.* = enabled
trac.ticket.report.* = disabled


[header_logo]
alt =
height = 23
link =
src = sit
width = 92

[logging]
log_file = trac.log
log_level = DEBUG
log_type = file

[mimeviewer]
enscript_modes = text/x-dylan:dylan:4
enscript_path = enscript
max_preview_size = 262144
mime_map = text/x-dylan:dylan,text/x-idl:ice,text/x-ada:ads:adb
php_path = /usr/local/bin/php
silvercity_modes =
tab_width = 8

[notification]
always_notify_owner = true
always_notify_reporter = true
always_notify_updater = true
mime_encoding = base64
smtp_always_bcc =
smtp_always_cc =
smtp_default_domain =
smtp_enabled = true
smtp_from =
smtp_password =
smtp_port = 25
smtp_replyto =
smtp_server = localhost
smtp_subject_prefix = __default__
smtp_user =
use_public_cc = false
use_short_addr = false
use_tls = false

[project]
descr =  Trac
footer = Visit the Trac open source project at<br /><a href="http://
trac.edgewall.org/">http://trac.edgewall.org/</a>
icon = common/trac.ico
name =
url =

[search]
min_query_length = 3

[ticket]
default_component =
default_milestone =
default_priority = normal
default_severity = normal
default_type = defect
default_version =
restrict_owner = true

[ticket-workflow]
accept = new -> assigned
accept.operations = set_owner_to_self
accept.permissions = TICKET_MODIFY
leave = * -> *
leave.default = 1
leave.operations = leave_status
reassign = new,assigned,reopened -> new
reassign.operations = set_owner
reassign.permissions = TICKET_MODIFY
reopen = closed -> reopened
reopen.operations = del_resolution
reopen.permissions = TICKET_CREATE
resolve = new,assigned,reopened -> closed
resolve.operations = set_resolution
resolve.permissions = TICKET_MODIFY

[timeline]
changeset_long_messages = false
changeset_show_files = 0
default_daysback = 30
ticket_show_details = false

[trac]
authz_file =
authz_module_name =
base_url =
check_auth_ip = true
database = sqlite:db/trac.db
default_charset = iso-8859-15
default_handler = WikiModule
htdocs_location =
ignore_auth_case = false
mainnav = wiki,timeline,roadmap,browser,tickets,newticket,search
metanav = login,logout,settings,help,about
permission_store = DefaultPermissionStore
repository_dir = /usr/local/svn
repository_type = svn
timeout = 20

[wiki]
ignore_missing_pages = false
split_page_names = false

And  my conf in apache

NameVirtualHost *:8080
<VirtualHost *:8080>
<Location />
   SetHandler mod_python
   PythonHandler trac.web.modpython_frontend
   PythonOption TracEnv /var/trac/projects/mysite
   PythonOption TracUriRoot /
   SetEnv PYTHON_EGG_CACHE /var/trac/egg-cache
</Location>
</VirtualHost>


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to