This is a snapshot of Indico's old Trac site. Any information contained herein is most probably outdated. Access our new GitHub site here.

Opened 4 years ago

Closed 4 years ago

#733 closed enhancement (wontfix)

Cannot protect "category" by password?

Reported by: hoffmann Owned by:
Priority: high Milestone:
Component: Security Version: 0.97.0
Keywords: write access password Cc:

Description

I have found ways to set "event"s to PRIVATE and then allow access by two ways, for either of the attributes READ and WRITE access: by (indico) user or by (anonymous) password. Thus I have essentially 4 ways to protect an event against unwanted access:

  1. read by (indico) user,
  2. read by (anon) password,
  3. write by user,
  4. write by password.

However, I could only configure a "category" for 1., 3. and 4. The READ protection by password only is not possible, in contrary to events.

Is that a wanted feature or a matter of system configuration? Can it be added to the earliest next release?

PS: I perfectly suport the point of view that WRITE access with password-only (po) is a relict of CDSagenda which should be phased out at some time. But in my mind READ access by po would always have some interest and in any case be more important than po WRITE.

Change History (1)

comment:1 Changed 4 years ago by jbenito

  • Milestone v0.97.1 deleted
  • Resolution set to wontfix
  • Status changed from new to closed

Point 2 and, you missed it, point 4 are not features of Indico.
We do not plan to add such a feature in the future because it is not a secure way of accessing/modifying categories.

Note: See TracTickets for help on using tickets.