Hello Ryan, thanks for your hint! I have activated AuthzPolicy on our Trac 1.2.2 environment and the following part is working as it should:
[wiki:testwiki@*] testuser = WIKI_VIEW --> testuser can only see the "testwiki" page, nothing else I was wondering if the realm (?) for milestone would be "milestone", but it failed: [milestone:testmilestone@*] testuser = TICKET_CREATE, TICKET_MODIFY, TICKET_VIEW The testuser can still only see that one testwiki page, but cannot view/edit tickets with milestone "testmilestone". I'm pretty sure that the syntax / realm for milestone is wrong. Can you help me out here? Thank you! Best regards, Andreas Am Montag, 26. August 2019 22:29:28 UTC+2 schrieb RjOllos: > > > > On Monday, August 26, 2019 at 8:04:40 AM UTC-7, Andreas wrote: >> >> Hey Ryan! >> >> The TracPrivateTickets permission policy looks pretty good to me, so >> customers can only see their tickets. >> Is there a way where - if you create a new ticket - you can only select >> specific milestones? I would like to have certain milestones only for >> certain customers available. Maybe there is a way to add users of customer >> A to a usergroup "Customer A" and assign milestones (or something like >> this) to this group? >> > > Yes, you can restrict access to milestones using a permission policy. > > One way would be to use AuthzPolicy and to provide fine-grained access > control for each milestone. The access controls are defined in an INI file. > I suggest creating a Trac environment, activating AuthzPolicy, and you can > experiment. > > Or, you can write a custom permission policy if there is some programatic > way to determine which milestones a user can access, such as a naming > pattern for the milestone, or a database table provided by a plugin. > > >> BTW, if we would need some TRAC-coding in the future - would you be >> available? (of course for payment) >> >> Thanks! >> >> Best regards, >> Andreas >> > -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to trac-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/trac-users/97b0f180-9ba2-4f27-93c9-d30bb1ec211a%40googlegroups.com.
