Fossil SCM
"j" permission doesn't extend to embedded doc files.
807ca32b8095b22…
· opened 17 years, 4 months ago
- Type
- Documentation
- Priority
- —
- Severity
- Important
- Resolution
- Not_A_Bug
- Subsystem
- —
- Created
- Nov. 22, 2008 10:43 a.m.
Hmmmm.... documenting a documentation problem...
I hate to have to report this, but the j permission doesn't allow "nobody" to see links to embedded documentation or other internal pages (e.g. [./login]).
I'm confused about whether this is bug or not. It looks like
index.wiki is set up assuming that "nobody" will be able to follow a
[./whatever] link, but that seems like a pretty big policy change.
Fix with a disclaimer? (I have one, but haven't pushed it yet.)
drh added on 2008-11-22 12:32:11:
Reading embedded documentation should require check-out privilege ("o")
since the user is reading files out of the source tree. Any file in any
check-in can be read using the embedded documentation URLs. So if we allow
users with Read-Wiki privilege ("j") to read embedded documentation, that
essentially makes "j" and "o" the same thing.