Trac Permissions
Table of Contents
Trac uses a simple but flexible permission system to control what users can and can't access.
Permission privileges are managed using the trac-admin tool.
Regular visitors, non-authenticated users, accessing the system are assigned the default role (user) named anonymous. Assign permissions to the anonymous user to set privileges for non-authenticated/guest users.
In addition to these privileges users can be granted additional individual rights in effect when authenticated and logged into the system.
Available Privileges
To enable all privileges for a user, use the TRAC_ADMIN permission. Having TRAC_ADMIN is like being root on a *NIX system, it will let you do anything you want.
Otherwise, individual privileges can be assigned to users for the various different functional areas of Trac:
Repository Browser
| BROWSER_VIEW | View directory listings in the repository browser |
| LOG_VIEW | View revision logs of files and directories in the repository browser |
| FILE_VIEW | View files in the repository browser |
| CHANGESET_VIEW | View repository check-ins |
Ticket System
| TICKET_VIEW | View existing tickets and perform ticket queries |
| TICKET_CREATE | Create new tickets |
| TICKET_APPEND | Add comments or attachments to tickets |
| TICKET_CHGPROP | Modify ticket properties |
| TICKET_MODIFY | Includes both TICKET_APPEND and TICKET_CHGPROP, and in addition allows resolving tickets |
| TICKET_ADMIN | All TICKET_* permissions, plus the deletion of ticket attachments. |
Roadmap
| MILESTONE_VIEW | View a milestone |
| MILESTONE_CREATE | Create a new milestone |
| MILESTONE_MODIFY | Modify existing milestones |
| MILESTONE_DELETE | Delete milestones |
| MILESTONE_ADMIN | All MILESTONE_* permissions |
| ROADMAP_VIEW | View the roadmap page |
| ROADMAP_ADMIN | Alias for MILESTONE_ADMIN (deprecated) |
Reports
| REPORT_VIEW | View reports |
| REPORT_SQL_VIEW | View the underlying SQL query of a report |
| REPORT_CREATE | Create new reports |
| REPORT_MODIFY | Modify existing reports |
| REPORT_DELETE | Delete reports |
| REPORT_ADMIN | All REPORT_* permissions |
Wiki System
| WIKI_VIEW | View existing wiki pages |
| WIKI_CREATE | Create new wiki pages |
| WIKI_MODIFY | Change wiki |
