View Ticket
Not logged in
Ticket UUID: 807ca32b8095b2297fd4aabb0aef5c5856867b15
Title: "j" permission doesn't extend to embedded doc files.
Status: Closed Type: Documentation
Severity: Important Priority:
Subsystem: Resolution: Not_A_Bug
Last Modified: 2008-11-25 18:42:55
Version Found In: 0a523be389
Description & Comments:
Hmmmm.... documenting a documentation problem...

I hate to have to report this, but the j permission doesn't allow "nobody" to see links to embedded documentation or other internal pages (e.g. [./login]).

I'm confused about whether this is bug or not. It looks like index.wiki is set up assuming that "nobody" will be able to follow a [./whatever] link, but that seems like a pretty big policy change.

Fix with a disclaimer? (I have one, but haven't pushed it yet.)


drh added on 2008-11-22 12:32:11:
Reading embedded documentation should require check-out privilege ("o") since the user is reading files out of the source tree. Any file in any check-in can be read using the embedded documentation URLs. So if we allow users with Read-Wiki privilege ("j") to read embedded documentation, that essentially makes "j" and "o" the same thing.