Ticket-Permissions

[buchtala@…]

On the way to finer grained permission and multiple projects(single env) it may be helpful to transfer the policy concept to ticket queries as well. Then, one can implement some kind of ticket policy which checks whether a user should see the ticket (e.g., using an authzfile)

[buchtala@…]

I attached a patch which I implemented for my local trac.

• (Unfortunately) I had to make some changes to the ticket api.
• Tried to give TicketSystem more control over ticket access (I think the direct access to the ticket db in other places is bad).
• Introduced an ITicketPermissionPolicy and implemented a dummy standard Policy

Bye, Oli

[cboos]

See #1316. The changes actually required are much less invasive than what you propose in your patch. See how it's done in the Wiki module for example. The sample authz policy plugin should also work unmodified for tickets, once the ticket module changes are in place.