[trac] Users without special permissions should be able to track bugs via e-mail

[arthur]

Background

Currently regular users cannot add their e-mail address to the CC of issues they didn't create.

What to change

All authenticated user groups should be able to add their e-mail address to the CC of issues they didn't create to keep track of them.

[philll]

The assigned state will be dropped by #403

[philll]

We could do this by granting every authenticated user the TICKET_MODIFY permission while putting permission checks on every field that does not yet have them and grant those to only those users who are currently having the TICKET_MODIFY permission. Additionally, we have to make sure that all status changes of existing issues have permission checks. The desired result then should be that existing issues are displayed in edit mode for all registered users but no field is actually editable, while the "Add to cc" checkbox should be available.

@trev: what do you think about that concept?

[trev]

Yes, I guess that's what we'll have to do.

[philll]

Rethinking my approach lead to the finding that this will not work, as Trac in general, and also our used plugin BlackMagicTicketTweaks with few exceptions share one and the same permission for creating and editing issue. That means, my approach would prohibit a normal user to edit any field when creating an issue, not only when editing an existing one.

Apparently, I currently don't see another workaround. One could invent a new plugin introducing a workflow operation setting/unsetting oneself to cc.

[nps1337]

spam