| | @@ -147,11 +147,10 @@ |
| 147 | 147 | @ <li value="11"><b>Write-Wiki</b>: Edit wiki pages</li> |
| 148 | 148 | @ <li value="13"><b>Append-Wiki</b>: Append to wiki pages</li> |
| 149 | 149 | @ <li value="14"><b>New-Tkt</b>: Create new tickets</li> |
| 150 | 150 | @ <li value="15"><b>Check-Out</b>: Check out versions</li> |
| 151 | 151 | @ <li value="16"><b>Password</b>: Change your own password</li> |
| 152 | | - @ <li value="17"><b>Query</b>: Create new queries against tickets</li> |
| 153 | 152 | @ <li value="18"><b>Read-Tkt</b>: View tickets</li> |
| 154 | 153 | @ <li value="19"><b>Setup:</b> Setup and configure this website</li> |
| 155 | 154 | @ <li value="20"><b>Tkt-Report:</b> Create new bug summary reports</li> |
| 156 | 155 | @ <li value="23"><b>Write-Tkt</b>: Edit tickets</li> |
| 157 | 156 | @ </ol> |
| | @@ -173,11 +172,11 @@ |
| 173 | 172 | ** WEBPAGE: /setup_uedit |
| 174 | 173 | */ |
| 175 | 174 | void user_edit(void){ |
| 176 | 175 | const char *zId, *zLogin, *zInfo, *zCap; |
| 177 | 176 | char *oaa, *oas, *oar, *oaw, *oan, *oai, *oaj, *oao, *oap; |
| 178 | | - char *oak, *oad, *oaq, *oac, *oaf, *oam, *oah, *oag, *oae; |
| 177 | + char *oak, *oad, *oac, *oaf, *oam, *oah, *oag, *oae; |
| 179 | 178 | char *oat; |
| 180 | 179 | int doWrite; |
| 181 | 180 | int uid; |
| 182 | 181 | int higherUser = 0; /* True if user being edited is SETUP and the */ |
| 183 | 182 | /* user doing the editing is ADMIN. Disallow editing */ |
| | @@ -220,11 +219,10 @@ |
| 220 | 219 | int aj = P("aj")!=0; |
| 221 | 220 | int ak = P("ak")!=0; |
| 222 | 221 | int an = P("an")!=0; |
| 223 | 222 | int ao = P("ao")!=0; |
| 224 | 223 | int ap = P("ap")!=0; |
| 225 | | - int aq = P("aq")!=0; |
| 226 | 224 | int ar = P("ar")!=0; |
| 227 | 225 | int as = g.okSetup && P("as")!=0; |
| 228 | 226 | int aw = P("aw")!=0; |
| 229 | 227 | int ac = P("ac")!=0; |
| 230 | 228 | int af = P("af")!=0; |
| | @@ -244,11 +242,10 @@ |
| 244 | 242 | if( ak ){ zCap[i++] = 'k'; } |
| 245 | 243 | if( am ){ zCap[i++] = 'm'; } |
| 246 | 244 | if( an ){ zCap[i++] = 'n'; } |
| 247 | 245 | if( ao ){ zCap[i++] = 'o'; } |
| 248 | 246 | if( ap ){ zCap[i++] = 'p'; } |
| 249 | | - if( aq ){ zCap[i++] = 'q'; } |
| 250 | 247 | if( ar ){ zCap[i++] = 'r'; } |
| 251 | 248 | if( as ){ zCap[i++] = 's'; } |
| 252 | 249 | if( at ){ zCap[i++] = 't'; } |
| 253 | 250 | if( aw ){ zCap[i++] = 'w'; } |
| 254 | 251 | |
| | @@ -282,11 +279,11 @@ |
| 282 | 279 | */ |
| 283 | 280 | zLogin = ""; |
| 284 | 281 | zInfo = ""; |
| 285 | 282 | zCap = ""; |
| 286 | 283 | oaa = oac = oad = oae = oaf = oag = oah = oai = oaj = oak = oam = |
| 287 | | - oan = oao = oap = oaq = oar = oas = oat = oaw = ""; |
| 284 | + oan = oao = oap = oar = oas = oat = oaw = ""; |
| 288 | 285 | if( uid ){ |
| 289 | 286 | zLogin = db_text("", "SELECT login FROM user WHERE uid=%d", uid); |
| 290 | 287 | zInfo = db_text("", "SELECT info FROM user WHERE uid=%d", uid); |
| 291 | 288 | zCap = db_text("", "SELECT cap FROM user WHERE uid=%d", uid); |
| 292 | 289 | if( strchr(zCap, 'a') ) oaa = " checked"; |
| | @@ -301,11 +298,10 @@ |
| 301 | 298 | if( strchr(zCap, 'k') ) oak = " checked"; |
| 302 | 299 | if( strchr(zCap, 'm') ) oam = " checked"; |
| 303 | 300 | if( strchr(zCap, 'n') ) oan = " checked"; |
| 304 | 301 | if( strchr(zCap, 'o') ) oao = " checked"; |
| 305 | 302 | if( strchr(zCap, 'p') ) oap = " checked"; |
| 306 | | - if( strchr(zCap, 'q') ) oaq = " checked"; |
| 307 | 303 | if( strchr(zCap, 'r') ) oar = " checked"; |
| 308 | 304 | if( strchr(zCap, 's') ) oas = " checked"; |
| 309 | 305 | if( strchr(zCap, 't') ) oat = " checked"; |
| 310 | 306 | if( strchr(zCap, 'w') ) oaw = " checked"; |
| 311 | 307 | } |
| | @@ -345,11 +341,10 @@ |
| 345 | 341 | } |
| 346 | 342 | @ <input type="checkbox" name="aa"%s(oaa)>Admin</input><br> |
| 347 | 343 | @ <input type="checkbox" name="ad"%s(oad)>Delete</input><br> |
| 348 | 344 | @ <input type="checkbox" name="ae"%s(oad)>Email</input><br> |
| 349 | 345 | @ <input type="checkbox" name="ap"%s(oap)>Password</input><br> |
| 350 | | - @ <input type="checkbox" name="aq"%s(oaq)>Query</input><br> |
| 351 | 346 | @ <input type="checkbox" name="ai"%s(oai)>Check-In</input><br> |
| 352 | 347 | @ <input type="checkbox" name="ao"%s(oao)>Check-Out</input><br> |
| 353 | 348 | @ <input type="checkbox" name="ah"%s(oah)>History</input><br> |
| 354 | 349 | @ <input type="checkbox" name="ag"%s(oag)>Clone</input><br> |
| 355 | 350 | @ <input type="checkbox" name="aj"%s(oaj)>Read Wiki</input><br> |
| | @@ -390,16 +385,10 @@ |
| 390 | 385 | @ users. This capability is intended for deletion of spam. The |
| 391 | 386 | @ delete capability is only in effect for 24 hours after the item |
| 392 | 387 | @ is first posted. The Setup user can delete anything at any time. |
| 393 | 388 | @ </p></li> |
| 394 | 389 | @ |
| 395 | | - @ <li><p> |
| 396 | | - @ The <b>Query</b> privilege allows the user to create or edit |
| 397 | | - @ report formats by specifying appropriate SQL. Users can run |
| 398 | | - @ existing reports without the Query privilege. |
| 399 | | - @ </p></li> |
| 400 | | - @ |
| 401 | 390 | @ <li><p> |
| 402 | 391 | @ An <b>Admin</b> user can add other users, create new ticket report |
| 403 | 392 | @ formats, and change system defaults. But only the <b>Setup</b> user |
| 404 | 393 | @ is able to change the repository to |
| 405 | 394 | @ which this program is linked. |
| | @@ -409,10 +398,19 @@ |
| 409 | 398 | @ The <b>History</b> privilege allows a user to see a timeline |
| 410 | 399 | @ with hyperlinks to version information, to download ZIP archives |
| 411 | 400 | @ of individual versions. |
| 412 | 401 | @ </p></li> |
| 413 | 402 | @ |
| 403 | + @ <li><p> |
| 404 | + @ The <b>Read Wiki</b>, <b>New Wiki</b>, <b>Append Wiki</b>, and |
| 405 | + @ <b>Write Wiki</b> privileges control access to wiki pages. The |
| 406 | + @ <b>Read Tkt</b>, <b>New Tkt</b>, <b>Append Tkt</b>, and |
| 407 | + @ <b>Write Tkt</b> privileges control access to trouble tickets. |
| 408 | + @ The <b>Tkt Report</b> privilege allows the user to create or edit |
| 409 | + @ ticket report formats. |
| 410 | + @ </p></li> |
| 411 | + @ |
| 414 | 412 | @ <li><p> |
| 415 | 413 | @ No login is required for user "<b>nobody</b>". The capabilities |
| 416 | 414 | @ of this user are available to anyone without supplying a username or |
| 417 | 415 | @ password. To disable nobody access, make sure there is no user |
| 418 | 416 | @ with an ID of <b>nobody</b> or that the nobody user has no |
| 419 | 417 | |