[Trac-tickets] [The Trac Project] #3525: Project index should check permissions

[The Trac Project]

#3525: Project index should check permissions
-------------------------------------+--------------------------------------
 Reporter:  christian at wilde-welt.de  |       Owner:  cmlenz
     Type:  defect                   |      Status:  new   
 Priority:  normal                   |   Milestone:        
Component:  mod_python frontend      |     Version:  0.9.6 
 Severity:  normal                   |    Keywords:        
-------------------------------------+--------------------------------------
 The project index generates a list of available projects by searching for
 subdirectories that happen to be valid trac environments. It simply tries
 to open those environments and (if that worked flawlessly) adds them to
 the list of projects.

 [source:/tags/trac-0.9.6/trac/web/main.py see line 301 ff.]

 It '''should''' however check if the current user actually has any
 permissions for the project before adding it to the list. A user needs at
 least WIKI_VIEW to view the project start page.

 I'll prepare a patch to see if this works, but in the meantime I'd like to
 propose this as a feature request.

-- 
Ticket URL: <http://trac.edgewall.org/ticket/3525>
The Trac Project <http://trac.edgewall.com/>