Project

General

Profile

Forums » Open discussion »

perm read

Added by Zdravko Balorda over 10 years ago

Hi,
every other module has permission "read" (view), except news and forums. I have users that I need to deny access to these two, but I can't. Any hint how to fix this?


Replies (4)

RE: perm read - Added by Mischa The Evil over 10 years ago

This is just not (yet) implemented. Requests for them already exists. See:

RE: perm read - Added by Mischa The Evil over 10 years ago

FTR: you could patch the source yourself and set the public option of both :view_* permissions to false explicitly (see source:/trunk/lib/redmine.rb#L89). However, this is not supported and/or tested, may result in uncovered edge-cases and may introduce other side-effects which aren't handled in the core at the moment.

RE: perm read - Added by Zdravko Balorda over 10 years ago

Thanks. I found it. Both permissions already exist and are overridden by public = true.

RE: perm read - Added by Mischa The Evil over 10 years ago

Please confirm yourself of the fact that you know for sure that you know what you are doing while applying these two changes, and be sure to handle all the issues they raise. If you manage to do that properly, then feel free to share your patches (prefereably including test coverage) with the community.
To show what I meant in RE: perm read I ran the testsuite with these two changes applied (on a recent, otherwise vanilla trunk without any plugins). And...? Well, see the log for yourself. 27 failures and one clear error while the whole suite completes succesfully when ran without these two changes applied :-/

View complete test log...

Please consider these issues, and my safety recommendations about them, carefully.

Regards,

Mischa.

    (1-4/4)