Mailing List Archive

On Wednesday, July 27, 2022 at 11:47:49 PM UTC-7 mic...@modprods.com wrote:

> Hi
>
> Is there a way to stop trac displaying the contents of the trac.ini
> config file on the About page?
>
> It seems to be doing this for admin permissioned users only but it's not
> great having the the smtp_password shown in the clear.
>
> Michela
>

You can use AuthzPolicy to control the display of the config info without
completely restricting the About page.
https://trac.edgewall.org/wiki/TracFineGrainedPermissions

It's not well documented, but the realm:id is: [config:ini]
https://trac.edgewall.org/browser/tags/trac-1.4.3/trac/about.py?marks=77#L80

[config:ini]
* =

This rule will prevent the display of the config on the About page for all
users.

Let us know if you have any questions.

--
You received this message because you are subscribed to the Google Groups "Trac Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to trac-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/trac-users/36735961-fe88-4a67-8219-9590dd08b79bn%40googlegroups.com.

On Thursday, July 28, 2022 at 10:16:00 AM UTC-7 RjOllos wrote:

> It's not well documented, but the realm:id is: [config:ini]
>
> https://trac.edgewall.org/browser/tags/trac-1.4.3/trac/about.py?marks=77#L80
>

And there is an open issue for documenting the realms and paths/ids:
https://trac.edgewall.org/ticket/9526

--
You received this message because you are subscribed to the Google Groups "Trac Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to trac-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/trac-users/0a3af1f9-f741-41e8-be1b-220637bebac9n%40googlegroups.com.