Securing trac from anonymous users?

Question

I have set up trac on my domain for issue tracking. How to I configure it so that when anonymous users visit the domain, ALL they see is a login form. Basically I want 2 security levels:

anonymous - visitors only have access to a login option

users (i.e. everybody else who has logged in) - have access to everything

Thanks!

Answer 1

You can remove all permissions for the anonymous user:

trac-admin /path/to/projenv permission remove anonymous '*'

For details see the Trac permission docs
Trac offers two different permission groups by default:

• authenticated
• anonymous

The docs describe how to change the group defaults and how you can form new permission sets in the permission groups section.

Answer 2

You'll want to look at the AccountManagerPlugin. It allows form-based authentication. You also want to remove permissions form anonymous as described in the other post.