- Change comment to "Hmmmm.... documenting a documentation problem... I hate to have to report this, but the <i><b>j</b></i> permission doesn't allow "nobody" to see links to embedded documentation or other internal pages (e.g. [./login]). I'm confused about whether this is bug or not. It looks like <code>index.wiki</code> is set up assuming that "nobody" will be able to follow a [./whatever] link, but that seems like a pretty big policy change. Fix with a disclaimer? (I have one, but haven't pushed it yet.) <hr><i>drh added on 2008-11-22 12:32:11:</i><br> Reading embedded documentation should require check-out privilege ("o") since the user is reading files out of the source tree. Any file in any check-in can be read using the embedded documentation URLs. So if we allow users with Read-Wiki privilege ("j") to read embedded documentation, that essentially makes "j" and "o" the same thing."
- Change resolution to "Not_A_Bug"
- Change status to "Closed"
- Appended to comment:
drh added on 2008-11-22 12:32:11:
Reading embedded documentation should require check-out privilege ("o") since the user is reading files out of the source tree. Any file in any check-in can be read using the embedded documentation URLs. So if we allow users with Read-Wiki privilege ("j") to read embedded documentation, that essentially makes "j" and "o" the same thing. - Change resolution to "Open"
- Change comment to "Hmmmm.... documenting a documentation problem... I hate to have to report this, but the <i><b>j</b></i> permission doesn't allow "nobody" to see links to embedded documentation or other internal pages (e.g. [./login]). I'm confused about whether this is bug or not. It looks like <code>index.wiki</code> is set up assuming that "nobody" will be able to follow a [./whatever] link, but that seems like a pretty big policy change. Fix with a disclaimer? (I have one, but haven't pushed it yet.)"
- Change foundin to "0a523be389"
- Change severity to "Important"
- Change status to "Open"
- Change title to ""j" permission doesn't extend to embedded doc files."
- Change type to "Documentation"