New Ticket

TICKET_CREATE privileges are required to perform this operation. You don't have the required permissions



Login Close


Add IPermissionRequestor to TracGVizSystem and others

Ticket #3 Assigned to olemis, last modified 5 years ago

Details

Reporter olemis
Keywords permission, xml-rpc
Type enhancement
Status closed
Priority major
Product dataviz
Milestone tracgviz_1.3.2
Component gviz_core
Version
Cc

Description

Provide a way so that GViz data source developers can specify the permissions needed to access the specific data.

This could rely on TracXMLPlugin permissions policy ... or maybe not ... ;)

Last modified by olemis (diff)
Note: See TracTickets for help on using tickets.

olemis

Replying to olemis:

Provide a way so that GViz data source developers can specify the permissions needed to access the specific data.

This could rely on TracXMLPlugin permissions policy ... or maybe not ... ;)

Currently there are two authorization mechanisms.

  • The first one is local assertions and relies mostly on TracXMLPlugin permissions. This way access to data tables is consistent with the rules defined by admins on the specific components from where they are retrieved (e.g. on accessing ticket data TICKET_VIEW permission is asserted by [pydoc:tracrpc.ticket.TicketRPC the underlying RPC handler]).
    Implemented since version 1.3.1
  • The second option is global permissions. Users not having GVIZ_VIEW permission CANNOT ACCESS ANY data source. This way administration is much easier.
    Implemented since version 1.3.2
  • Milestone set to tracgviz_1.3.2 - by olemis, 9 years ago

olemis

Binding tickets for features core to gviz_core component.

  • Component changed from plugin_trac_gviz to gviz_core - by olemis, 5 years ago