View Issue Details

IDProjectCategoryView StatusLast Update
0007722mantisbtfeaturepublic2007-04-09 23:21
Reporterdsolajic Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Summary0007722: Anonymous access to issue rss feed should be separated from anonymous access to Mantis itself
Description

Anonymous access to issue rss feed should be enabled separately from anonymous access to Mantis itself.

TagsNo tags attached.

Activities

Rhasta

Rhasta

2007-01-29 22:59

reporter   ~0013978

I think it might be useful for you to provide more justification for this request or some of the reasoning behind it.

As someone who developed part of the current RSS functionality I myself cannot see a reason to separate the two, maybe you can provide use case as an example though.

dsolajic

dsolajic

2007-01-30 02:10

reporter   ~0013979

Hello.
Well, I tried to use the RSS feeds from the Mantis by a custom application and could not until you make whole Mantis accessible to anonymous users. For security reasons I do not want to allow that.
So there are only two options (as far as I see them).
Either allow access to RSS feed (issues to RSS) to already logged in users and second allow anonymous access only to RSS feed and let administrator controls the access to the page itself (through web authentication).
I hope this makes sense.
Kind Regards,
Damir

Rhasta

Rhasta

2007-02-01 16:26

reporter   ~0013995

As near as I can tell what you are requesting is already possible in the current Mantis 1.1 alpha.

To allow a custom application access to the RSS feeds without opening up anonymous access to anything you would:

1) Create a user/pass for your application with as low access as required to view your public bugs.
2) Log in as that user, copy the link to the issues RSS feed (which includes a unique identifier for the logged in user).
3) Use that URL in your application.
4) Profit.