Restrict Changing Ticket Milestone

David Huang

unread,

Jun 18, 2020, 1:41:52 PM6/18/20

to trac-...@googlegroups.com

Hi, I've read
https://trac.edgewall.org/wiki/CookBook/PermissionPolicies#RestrictChangingTicketMilestone
and some of the linked pages, but I'm still not clear on how to get that
to work. That page says "The action can be defined using
ExtraPermissionsProvider, and with no other changes to the permission
policy, changing the milestone property will be restricted to users with
the |TICKET_CHG_MILESTONE| permission." I've added
|TICKET_CHG_MILESTONE| as an extra permission, and it's now available as
an Action in the Grant Permission section of .../admin/general/perm.
However, users with TICKET_CHGPROP and MILESTONE_VIEW, but without
TICKET_CHG_MILESTONE are still able to change the milestone.

I want users to be able to view the milestone list and query for tickets
that are in a certain milestone, but not be able to modify the milestone
of a ticket. If I remove the MILESTONE_VIEW permission, they can't
modify a ticket's milestone, but the ticket Custom Query no longer shows
any milestones in the filter dropdown (which I think is exactly the same
behavior as before I added TICKET_CHG_MILESTONE as an extra permission).

David Huang

unread,

Jun 18, 2020, 1:42:56 PM6/18/20

to trac-...@googlegroups.com

On 6/18/2020 12:41 PM, David Huang wrote:
> Hi, I've read
> https://trac.edgewall.org/wiki/CookBook/PermissionPolicies#RestrictChangingTicketMilestone
> and some of the linked pages, but I'm still not clear on how to get
> that to work.

Forgot to mention that I'm on Trac 1.4.2.

RjOllos

unread,

Jun 23, 2020, 5:38:33 PM6/23/20

to Trac Users

I'm happy to hear that the feature is valuable!

Unfortunately, I didn't consider that case, so I'll have to fix it in 1.4.3. In the meantime you could replace DefaultTicketPolicy as described in: