Hiding config.ini display on About page

27 views
Skip to first unread message

mic...@modprods.com

unread,
Jul 28, 2022, 2:47:49 AM7/28/22
to Trac Users
Hi

Is there a way to stop trac displaying the contents of the  trac.ini config file on the About page?

It seems to be doing this for admin permissioned users only but it's not great having the the smtp_password shown in the clear.

Michela

RjOllos

unread,
Jul 28, 2022, 1:16:00 PM7/28/22
to Trac Users
You can use AuthzPolicy to control the display of the config info without completely restricting the About page. 

It's not well documented, but the realm:id is: [config:ini]

[config:ini]
* = 

This rule will prevent the display of the config on the About page for all users.

Let us know if you have any questions.

RjOllos

unread,
Jul 28, 2022, 1:17:18 PM7/28/22
to Trac Users
On Thursday, July 28, 2022 at 10:16:00 AM UTC-7 RjOllos wrote:
It's not well documented, but the realm:id is: [config:ini]

And there is an open issue for documenting the realms and paths/ids:
Reply all
Reply to author
Forward
0 new messages