From 8fdf2acc2b34d2df0e3902a5db15ba6973b5c243 Mon Sep 17 00:00:00 2001 From: richard Date: Wed, 23 Dec 2009 00:34:39 +0000 Subject: [PATCH] fixes git-svn-id: http://svn.roundup-tracker.org/svnroot/roundup/roundup/trunk@4416 57a73879-2fb5-44c3-a270-3262357dd7e2 --- doc/upgrading.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/doc/upgrading.txt b/doc/upgrading.txt index 84a703a..3b69fbf 100644 --- a/doc/upgrading.txt +++ b/doc/upgrading.txt @@ -25,8 +25,8 @@ to create. Migrating from 1.4.x to 1.4.11 ============================== -Close poential security hole ----------------------------- +Close potential security hole +----------------------------- If your tracker has untrusted users you should examine its ``schema.py`` file and look for the section granting the "Edit" permission to your users. @@ -54,10 +54,10 @@ A separate "Register" permission has been introduced to allow anonymous users to register. This means you will need to add the following to your tracker's ``schema.py`` to add the permission and assign it to the Anonymous role (replacing any previously assigned -"Create user" permission for the Anonymous role): +"Create user" permission for the Anonymous role):: +db.security.addPermission(name='Register', klass='user', - + description='User is allowed to register new user') + + description='User is allowed to register new user') # Assign the appropriate permissions to the anonymous user's Anonymous # Role. Choices here are: -- 2.30.2