On Wednesday, July 27, 2022 at 11:47:49 PM UTC-7 [email protected] wrote:

> Hi
>
> Is there a way to stop trac displaying the contents of the  trac.ini 
> config file on the About page?
>
> It seems to be doing this for admin permissioned users only but it's not 
> great having the the smtp_password shown in the clear.
>
> Michela
>

You can use AuthzPolicy to control the display of the config info without 
completely restricting the About page. 
https://trac.edgewall.org/wiki/TracFineGrainedPermissions

It's not well documented, but the realm:id is: [config:ini]
https://trac.edgewall.org/browser/tags/trac-1.4.3/trac/about.py?marks=77#L80

[config:ini]
* = 

This rule will prevent the display of the config on the About page for all 
users.

Let us know if you have any questions.

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/trac-users/36735961-fe88-4a67-8219-9590dd08b79bn%40googlegroups.com.

Reply via email to