Team Chat Logs

July 20, 2010

2010 6
Mo Tu We Th Fr Sa Su
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31  

[01:31:17.486079]<pipoun>hello
[01:36:30.251477]<pipoun>sorry where is the trac changelog for 0.12?
[01:37:23.774351]<pipoun>http://trac.edgewall.org/wiki/ChangeLog
[01:37:26.724751]<pipoun>sorry about that
[02:49:07.547342]<evil_twin>t.e.o: Ticket #9439 (KeyError: 'trac/locale') updated - <http://trac.edgewall.org/ticket/9439#comment:20> - rblank
[03:24:14.368620]<evil_twin>t.e.o: Ticket #9510 (Action block stays visible when no actions available) created - <http://trac.edgewall.org/ticket/9510> - fredck@…
[03:24:19.367574]<evil_twin>t.e.o: Changeset [9959]: 0.12-stable: Don't shorten list items in the `[[PageOutline()]]` macro ... - <http://trac.edgewall.org/changeset/9959> - rblank
[03:29:15.336592]<evil_twin>t.e.o: Ticket #9391 (link shortening should not apply to "inline" mode with PageOutline macro) closed - <http://trac.edgewall.org/ticket/9391#comment:1> - rblank
[03:29:20.338098]<evil_twin>t.e.o: Ticket #9391 (link shortening should not apply to "inline" mode with PageOutline macro) updated - <http://trac.edgewall.org/ticket/9391#comment:2> - rblank
[03:34:16.312334]<evil_twin>t.e.o: Ticket #2781 (can't see attachments when editing a page) updated - <http://trac.edgewall.org/ticket/2781#comment:5> - rblank
[04:09:22.121704]<evil_twin>t.e.o: Ticket #9510 (Action block stays visible when no actions available) updated - <http://trac.edgewall.org/ticket/9510#comment:1> - rblank
[04:44:28.888724]<evil_twin>t.e.o: Ticket #9510 (Action block stays visible when no actions available) updated - <http://trac.edgewall.org/ticket/9510#comment:2> - fredck@…
[05:04:32.754960]<evil_twin>t.e.o: Changeset [9960]: wiki: Show the list of attachments when editing a wiki page. Closes ... - <http://trac.edgewall.org/changeset/9960> - rblank
[05:09:33.722224]<evil_twin>t.e.o: Ticket #2781 (can't see attachments when editing a page) closed - <http://trac.edgewall.org/ticket/2781#comment:6> - rblank
[05:29:37.616445]<evil_twin>t.e.o: Changeset [9961]: 0.12-stable: Display a notice when attaching files after creating a ... - <http://trac.edgewall.org/changeset/9961> - rblank
[05:29:42.616125]<evil_twin>t.e.o: Ticket #9428 (Submitting new ticket with image attachment marked as spam gives unclear ...) closed - <http://trac.edgewall.org/ticket/9428#comment:5> - rblank
[05:34:38.582567]<evil_twin>t.e.o: Ticket #2781 (can't see attachments when editing a page) updated - <http://trac.edgewall.org/ticket/2781#comment:7> - cboos
[05:34:43.581486]<evil_twin>t.e.o: Changeset [9962]: 0.13dev: Merged [9941:9961] from 0.12-stable. - <http://trac.edgewall.org/changeset/9962> - rblank
[05:39:39.547845]<evil_twin>t.e.o: Ticket #9417 ([PATCH] Genshi UnicodeDecodeError (Admin > General > Plugin)) updated - <http://trac.edgewall.org/ticket/9417#comment:8> - rblank
[05:49:41.488844]<evil_twin>t.e.o: Ticket #2781 (can't see attachments when editing a page) reopened - <http://trac.edgewall.org/ticket/2781#comment:8> - rblank
[05:49:46.488663]<evil_twin>t.e.o: Ticket #2045 (shortcut to "accept" a ticket when creating it, and enable the "accept" ...) updated - <http://trac.edgewall.org/ticket/2045#comment:26> - Andrew C Martin <andrew.c.martin@…>
[05:59:43.426636]<evil_twin>t.e.o: Changeset [9963]: 0.12-stable: Merged [9925] from 0.11-stable. - <http://trac.edgewall.org/changeset/9963> - rblank
[05:59:48.428661]<evil_twin>t.e.o: Changeset [9964]: 0.13dev: Merged [9925] from 0.11-stable. - <http://trac.edgewall.org/changeset/9964> - rblank
[06:04:44.991075]<evil_twin>t.e.o: Ticket #130 (Multi-project support) updated - <http://trac.edgewall.org/ticket/130#comment:155> - anonymous
[06:04:49.990960]<evil_twin>t.e.o: Ticket #9417 ([PATCH] Genshi UnicodeDecodeError (Admin > General > Plugin)) closed - <http://trac.edgewall.org/ticket/9417#comment:9> - rblank
[06:17:06.070714]<tuxipuxi>guys, i haven't upgraded to trac 0.12 yet so i can't check the admin panel myself. does the admin page in trac 0.12 really allow to configure repository paths from the web meaning that if a user has TRAC_ADMIN to one project he can access whatever repository he wants to view?
[06:17:12.939835]<tuxipuxi>by just adding the repository to this project?
[06:23:09.617518]<slam>tuxipuxi: well, depends on the svn access rights of the other svn
[06:30:49.201651]<tuxipuxi>slam: so it takes the authz file setting into account? if there is no authz_file setting and i enter the path of a "secret" repository it won't make it available in the browser?
[06:43:27.570220]<rblank>tuxipuxi: You are correct that a user with TRAC_ADMIN can set up any repository located on the machine, *including* a "secret" repository. This is independent of authz.
[06:44:04.751673]<tuxipuxi>rblank: and also read the repository if no authz is configured in trac.ini?
[06:44:15.001513]<tuxipuxi>read using "browse source" i mean
[06:44:59.455793]<rblank>tuxipuxi: Correct.
[06:45:24.219770]<tuxipuxi>rblank: that looks like a security issue IMO
[06:45:43.824983]<tuxipuxi>only way to workaround is to disable the repositoryadmin and plugin pages in trac.ini?
[06:45:45.028997]<rblank>tuxipuxi: If you don't like that behavior, you can disable the component that manages repositories in the DB.
[06:46:00.703813]<rblank>Right
[06:46:42.686447]<rblank>You are thinking about a "shared Trac hosting" situation, right?
[06:46:54.826962]<tuxipuxi>rblank: yes right
[06:47:17.782961]<tuxipuxi>i could work around the plugins problem by setting the plugins directories 555, but the repositoryadmin page is a real problem
[06:48:18.535390]<rblank>tuxipuxi: I hadn't thought of that situation when I implemented the feature. How about allowing to define a prefix in trac.ini that every repository path must have (otherwise it's rejected with a permission error)?
[06:48:55.806632]<rblank>tuxipuxi: That requires a hierarchical organization of the repositories, though.
[06:50:48.854797]<tuxipuxi>rblank: i think requiring a prefix of the repositories to be set in trac.ini (and thee only, not accessible through web) like /var/svn/myprojects plus the authz_file setting would help
[06:51:13.358196]<tuxipuxi>just authz_file alone wouldn't be enough because there could be multiple SVNParentPath in apache config
[06:51:47.510895]<rblank>tuxipuxi: authz_file wouldn't help, as you can name your repository as you like when adding it via the web admin panel.
[06:52:04.211360]<tuxipuxi>oh i see
[06:53:11.268539]<rblank>tuxipuxi: If the web admin panel bothers you, you can disable it by adding "[components] trac.versioncontrol.admin.* = disabled" to your trac.ini.
[06:53:40.394113]<rblank>tuxipuxi: You'll still be able to define repositories in trac.ini or with trac-admin, but that requires console access.
[06:53:46.985409]<rblank>s/console/shell/
[06:53:46.995909]<evil_twin>rblank meant: tuxipuxi: You'll still be able to define repositories in trac.ini or with trac-admin, but that requires shell access.
[06:54:55.973229]<rblank>tuxipuxi: Ooh, wait, wrong. You can't disable that component, as it has other required functionality.
[06:55:31.179949]<tuxipuxi>rblank: what is it required by?
[06:56:11.686817]<rblank>tuxipuxi: It provides the "repository resync", "changeset added", and other trac-admin commands. That is unfortunate.
[06:56:25.468581]<rblank>As well as the permissions.
[06:56:34.045910]<rblank>We should move the admin panel to a separate component.
[06:57:01.465724]<rblank>tuxipuxi: Would you mind opening a ticket on trac.edgewall.org about this issue?
[06:57:07.487292]<tuxipuxi>rblank: could i disable the versioncontrol admin page for all projects by editing the htdocs page?
[06:57:20.247104]<tuxipuxi>sure, will do it late
[06:57:37.873011]<rblank>tuxipuxi: You can assign it to me, I'll try to fix it quickly.
[06:58:13.242511]<tuxipuxi>rblank: that would be great because due to the structure of my setup it is a real blocker for me.. the users aren't trusted to access any repository
[06:58:55.009317]<rblank>tuxipuxi: It would help if you could describe your setup a bit more precisely, so that we don't repeat such issues in the future.
[06:59:01.160531]<rblank>(in the ticket)
[07:00:00.836311]<tuxipuxi>rblank: ok, will do that. do you think that it will be possible to simply not install this admin page at all when it has been moved to a different component?
[07:00:18.133833]<tuxipuxi>so that i don't have to add the "... = disabled" line in each trac.ini?
[07:00:45.163976]<tuxipuxi>e.g. by removing the component from setup.py on my setup
[07:01:35.770663]<rblank>tuxipuxi: No, that won't be possible. However, you could set up a shared configuration file and include it with "[inherit] file" in trac.ini so that you don't have to change each trac.ini in the future.
[07:02:33.592026]<tuxipuxi>rblank: so if there's no [inherit] section yet i can simply append it to the files (easily done) and disable the component there? that would be an option
[07:02:53.307110]<rblank>tuxipuxi: Yep
[07:02:56.594878]<tuxipuxi>rblank: alternatively i could also edit admin_repositories.html so it doesn't provide any functionality, right?
[07:03:42.675774]<rblank>tuxipuxi: That will only make the functionality invisible. It would still be possible to submit requests that add repsoitories.
[07:03:59.773734]<tuxipuxi>oh, right
[07:15:41.293474]<tuxipuxi>rblank: http://trac.edgewall.org/ticket/9511
[07:16:46.056409]<tuxipuxi>rblank: can you estimate when 0.12.1 will be released (and the change for the ticket included)?
[07:16:54.484439]<rblank>tuxipuxi: Excellent, thanks.
[07:17:01.423732]<tuxipuxi>no problem, thank you
[07:17:14.329861]<tuxipuxi>or can you attach a diff so a 0.12 installation can be patched?
[07:17:40.691751]<rblank>tuxipuxi: Not really, but installing from SVN is only marginally more difficult than from a pre-built package, and the 0.12-stable branche is pretty, well, stable.
[07:18:09.329113]<tuxipuxi>rblank: oh, right. simply svn co'ing it and using python setup.py install will do it?
[07:18:48.135921]<rblank>tuxipuxi: Or even "easy_install http://svn.edgewall.org/repos/trac/branches/0.12-stable"
[07:19:57.993043]<evil_twin>t.e.o: Ticket #9511 (trac.versioncontrol.admin component should be optional) created - <http://trac.edgewall.org/ticket/9511> - Coscop@…
[07:20:04.311344]<tuxipuxi>rblank: even better. :) do you know if the simple (i.e. <= 0.11) repository setup via repository_dir will be supported in the long term?
[07:20:48.706553]<tuxipuxi>for installations with many projects dropping support for this (and in general, for existing trac.inis) would be major pain
[07:20:57.062168]<rblank>tuxipuxi: I don't know about "long term" but it's still there in 0.12, and you can define several repositories in trac.ini in the "[repositories]" section.
[07:21:16.393811]<rblank>tuxipuxi: I see no reason to remove it.
[07:21:50.001010]<tuxipuxi>rblank: ok, great. while we are at it.. trac 0.11 files are fully compatible with 0.12 also regarding notifications etc.?
[07:22:02.550431]<tuxipuxi>the upgrade section doesn't indicate otherwise, but better to be sure
[07:23:35.239142]<rblank>tuxipuxi: AFAICR, yes.
[07:24:59.304212]<evil_twin>t.e.o: Ticket #9511 (trac.versioncontrol.admin component should be optional) updated - <http://trac.edgewall.org/ticket/9511#comment:1> - rblank
[07:37:51.695402]<tuxipuxi>rblank: will trac mind removing all comments from trac.ini, especially the encoding line? i want to modify my trac.ini files using ConfigParser but it ignores the comment lines so they are removed when writing
[07:38:24.557568]<rblank>tuxipuxi: No it won't.
[07:38:59.951415]<tuxipuxi>rblank: assuming you don't know how to make configparser read the comment lines, do you see any other problem with removing the comments?
[07:39:22.258199]<tuxipuxi>i want to add file = ... to [inherit] of all trac.inis and ConfigParser looks like an elegant way
[07:39:23.888816]<rblank>tuxipuxi: Not that I know of. Trac is using ConfigParser as well.
[07:39:39.153499]<rblank>tuxipuxi: I'd have used sed, but that's just me :)
[07:42:24.922101]<tuxipuxi>rblank: ok (hopefully) last question then i'll stop wasting your time :) .. running http://dpaste.de/ka7N/ for all projects and disabling the components (your comment on the ticket made me consider to also disable the logging component) in /path/to/inherit/file will solve my problem once you have resolved the ticket, right?
[07:43:54.427741]<rblank>tuxipuxi: Looks fine, yes. Provided none of your trac.ini has a "[inherit] file" option already.
[07:44:20.800436]<rblank>tuxipuxi: Note that this will screw up the order of the options in trac.ini (in addition to removing all the comments).
[07:44:33.954724]<rblank>tuxipuxi: Makes them less readable.
[07:44:46.391213]<tuxipuxi>rblank: they have an automatically created [inherit] section with plugins_dir, but no file = setting. assuming there were a file = option it would simply overwrite it, right?
[07:45:05.365672]<tuxipuxi>rblank: can't really avoid that, can i? :)
[07:46:58.299485]<rblank>tuxipuxi: You could take the existing value and append the new path, with a comma as a separator.
[07:47:36.713950]<tuxipuxi>oh, ok. well atually i'm pretty sure there is no file= setting anywhere
[07:51:14.589542]<rblank>tuxipuxi: http://trac.edgewall.org/ticket/9511#comment:2
[07:51:59.620512]<tuxipuxi>rblank: that was quick, thank you!
[07:52:31.928727]<rblank>tuxipuxi: np
[07:55:03.841572]<evil_twin>t.e.o: Changeset [9965]: 0.12-stable: Moved the repository admin panel to a separate component, so ... - <http://trac.edgewall.org/changeset/9965> - rblank
[07:55:08.841531]<evil_twin>t.e.o: Ticket #9511 (trac.versioncontrol.admin component should be optional) updated - <http://trac.edgewall.org/ticket/9511#comment:2> - rblank
[08:05:05.779850]<evil_twin>t.e.o: Ticket #130 (Multi-project support) updated - <http://trac.edgewall.org/ticket/130#comment:155> - james.owen@…
[08:10:06.754225]<evil_twin>t.e.o: Ticket #9512 (Build error) created - <http://trac.edgewall.org/ticket/9512> - efim_serg@…
[08:18:25.810397]<tuxipuxi>rblank: when trac.admin.web_ui.LoggingAdminPanel = disabled is set the page is not only made invisible but it's also not possible to directly change the settings by knowing the correct URL, right?
[08:18:43.109560]<rblank>tuxipuxi: Correct.
[08:19:07.227037]<tuxipuxi>great :)
[08:40:12.590812]<evil_twin>t.e.o: Ticket #9512 (Build error) closed - <http://trac.edgewall.org/ticket/9512#comment:1> - rblank
[08:49:47.677797]*DanC wonders if coderanger is around, with bandwidth to help with traccas
[09:45:23.327450]<evil_twin>t.e.o: Ticket #9511 (trac.versioncontrol.admin component should be optional) updated - <http://trac.edgewall.org/ticket/9511#comment:3> - anonymous
[09:45:28.326533]<evil_twin>t.e.o: Ticket #9511 (trac.versioncontrol.admin component should be optional) closed - <http://trac.edgewall.org/ticket/9511#comment:4> - anonymous
[11:39:17.544622]*DanC pores over a stack trace to try to figure out how trac authentication works...
[11:39:37.483285]<DanC>this _do_login stuff... is it documented anywhere?
[11:41:00.500826]*DanC reads http://trac.edgewall.org/wiki/TracDev/ComponentArchitecture ...
[11:51:49.482187]<DanC>traccas flow seems to go like this:
[11:52:56.595856]<DanC>1. the login link atop the trac page goes to ...cas/login?service=...trac/login
[11:53:01.339454]<DanC>2. the user follows this link
[11:53:09.090152]<DanC>3. the user authenticates to the CAS server
[11:53:19.634447]<DanC>4. the CAS server redirects back to trac/login
[11:54:44.995019]<DanC>5. the trac dispatcher gets us to traccas.CasLoginModule._do_login
[11:57:37.397821]<DanC>6. req.remote_user is false, so _do_login calls redirect('...cas/login?service=...trac/login')
[11:57:58.429070]<DanC>which brings us back to step 2, and hence an endless loop
[11:58:10.693773]<DanC>(broken only by loop detection in the browser)
[11:59:15.470727]*DanC wonders if base_url is required...
[12:00:47.781187]<evil_twin>t.e.o: TracDev/Proposals/AdvancedWikiFormatting edited - <http://trac.edgewall.org/wiki/TracDev/Proposals/AdvancedWikiFormatting?version=38> - cboos
[12:06:13.715347]<DanC>setting base_url didn't help
[12:06:54.962839]*DanC (re-)discovers http://trac-hacks.org/ticket/4025 "TracCas always redirected me back to CAS which put my browser in an infinite loop"
[12:08:49.422301]<DanC>win!
[13:56:10.782334]<evil_twin>t.e.o: Ticket #7984 (spam-filter-captcha did not install fonts directory) updated - <http://trac.edgewall.org/ticket/7984#comment:3> - michaelc@…
[14:06:11.383425]<evil_twin>t.e.o: Ticket #9513 (spam filter captcha redirect incorrect when not installed at root) created - <http://trac.edgewall.org/ticket/9513> - michaelc@…
[17:21:48.246579]<evil_twin>t.e.o: TracCgi edited - <http://trac.edgewall.org/wiki/TracCgi?version=48> - gavin@…
[21:02:30.927486]<evil_twin>t.e.o: Ticket #9514 (Support list of users as options list in ticket custom field (copy of ...) created - <http://trac.edgewall.org/ticket/9514> - jatyap