python - 如何在 TRAC simplemultiproject 环境中按权限仅显示可用项目

Question

使用 TRAC v 1.0 进行测试

我偶然发现用户可以看到他们无权访问的项目。我不希望他们只看到这些项目的“无权限”，我只是想在用户没有查看项目的权限时将其完全隐藏。

这是一个q'n'd“解决方案”，只需将两行代码移动到另一个地方即可。如果有人需要它，只需按如下所示进行更改即可。

替换:

    for project_name in sorted(projects.keys()):
        has_access = True
        can_show = True
        if (project_name == "--None Project--"):
            div_project = '<br><div id="project"><fieldset><legend><h2>Unbenanntes Projekt</h2></legend>'
        else:
            project_info = self.__SmpModel.get_project_info(project_name)
            if project_info:
                if hide_closed and project_info[4] > 0: # column 4 of table smp_project tells if project is closed
                    can_show = False
                if self.__SmpModel.is_not_in_restricted_users(req.authname, project_info):
                    has_access = False

            div_project = '<br><div id="project"><fieldset><legend><b>Projekt </b> <em style="font-size: 12pt; color: black;">%s</em></legend>' % project_name
            if can_show and has_access and project_info and show_proj_descr:
                div_project = div_project + '<div class="description" xml:space="preserve">'
                if project_info[2]:
                    div_project = div_project + '%s<br/><br/>' % project_info[2]

                div_project = div_project + '%s</div>' % wiki_to_html(project_info[3], self.env, req)

        div_milestone = ''

        if can_show and len(projects[project_name]) > 0:
            if has_access:
                for milestone in projects[project_name]:
                    mi = '<em>%s</em>' % milestone
                    for i in range(len(div_milestones_array)):
                        if(div_milestones_array[i].find(mi)>0):
                            div_milestone = div_milestone + div_milestones_array[i]
            else:
                div_milestone = '<em style="color: red;">no permission</em>'
            div_project = div_project + to_unicode(div_milestone) + '</fieldset></div>'
            div_projects_milestones = to_unicode(div_projects_milestones + div_project)

    stream_div_projects_milestones = HTML(div_projects_milestones)
    return stream_div_projects_milestones

与:

    for project_name in sorted(projects.keys()):
        has_access = True
        can_show = True
        project_info = self.__SmpModel.get_project_info(project_name)
        if self.__SmpModel.is_not_in_restricted_users(req.authname, project_info):
            has_access = False

        if has_access:
            if (project_name == "--None Project--"):
                div_project = '<br><div id="project"><fieldset><legend><h2>Unbenanntes Projekt</h2></legend>'
            else:
                if project_info:
                    if hide_closed and project_info[4] > 0: # column 4 of table smp_project tells if project is closed
                        can_show = False                    

                div_project = '<br><div id="project"><fieldset><legend><b>Projekt </b> <em style="font-size: 12pt; color: black;">%s</em></legend>' % project_name
                if can_show and has_access and project_info and show_proj_descr:
                    div_project = div_project + '<div class="description" xml:space="preserve">'
                    if project_info[2]:
                        div_project = div_project + '%s<br/><br/>' % project_info[2]

                    div_project = div_project + '%s</div>' % wiki_to_html(project_info[3], self.env, req)

            div_milestone = ''

            if can_show and len(projects[project_name]) > 0:
                if has_access:
                    for milestone in projects[project_name]:
                        mi = '<em>%s</em>' % milestone
                        for i in range(len(div_milestones_array)):
                            if(div_milestones_array[i].find(mi)>0):
                                div_milestone = div_milestone + div_milestones_array[i]
                else:
                    div_milestone = '<em style="color: red;">no permission</em>'
                div_project = div_project + to_unicode(div_milestone) + '</fieldset></div>'
                div_projects_milestones = to_unicode(div_projects_milestones + div_project)

        stream_div_projects_milestones = HTML(div_projects_milestones)
    return stream_div_projects_milestones

在simplemultiproject/roadmap.py

重新启动您的 apache Web 服务器，您将只看到您有权访问的项目。

Answer 1

嗯，经过一段时间的尝试这个“解决方案”后，我在设置不同的过滤器时遇到了一些问题。再次查看脚本后，我发现只需要更改 2 行。

这是我新的更好的解决方案:只需将上面的代码替换为此代码即可。

    for project_name in sorted(projects.keys()):
        has_access = True
        can_show = True
        if (project_name == "--None Project--"):
            div_project = '<br><div id="project"><fieldset><legend><h2>Unbenanntes Projekt</h2></legend>'
        else:
            project_info = self.__SmpModel.get_project_info(project_name)
            if project_info:
                if hide_closed and project_info[4] > 0: # column 4 of table smp_project tells if project is closed
                    can_show = False
                if self.__SmpModel.is_not_in_restricted_users(req.authname, project_info):
                    has_access = False

            div_project = '<br><div id="project"><fieldset><legend><b>Projekt </b> <em style="font-size: 12pt; color: black;">%s</em></legend>' % project_name
            if can_show and has_access and project_info and show_proj_descr:
                div_project = div_project + '<div class="description" xml:space="preserve">'
                if project_info[2]:
                    div_project = div_project + '%s<br/><br/>' % project_info[2]

                div_project = div_project + '%s</div>' % wiki_to_html(project_info[3], self.env, req)

        div_milestone = ''

        if has_access:            
            if can_show and len(projects[project_name]) > 0:

                for milestone in projects[project_name]:
                    mi = '<em>%s</em>' % milestone
                    for i in range(len(div_milestones_array)):
                        if(div_milestones_array[i].find(mi)>0):
                            div_milestone = div_milestone + div_milestones_array[i]
            else:
                div_milestone = '<em style="color: red;">no permission</em>'
            div_project = div_project + to_unicode(div_milestone) + '</fieldset></div>'
            div_projects_milestones = to_unicode(div_projects_milestones + div_project)

    stream_div_projects_milestones = HTML(div_projects_milestones)
    return stream_div_projects_milestones

相应的差异是:

Index: simplemultiprojectplugin/trunk/simplemultiproject/roadmap.py
===================================================================
--- simplemultiprojectplugin/trunk/simplemultiproject/roadmap.py    (revision 13785)
+++ simplemultiprojectplugin/trunk/simplemultiproject/roadmap.py    (working copy)
@@ -157,8 +157,9 @@

             div_milestone = ''

-            if can_show and len(projects[project_name]) > 0:
-                if has_access:
+            if has_access:            
+                if can_show and len(projects[project_name]) > 0:
+
                     for milestone in projects[project_name]:
                         mi = '<em>%s</em>' % milestone
                         for i in range(len(div_milestones_array)):