Changeset 37343 for wiki

wiki/pages/CamelCase

-                      r26484
+                      r37343
 = !CamelCase =
 New words created by smashing together capitalized words.
+= !CamelCase
+New wiki links are automatically created when concatenating capitalized words, such that for example the word 'Camel' and the word 'Case' concatenated form a link to this CamelCase page.
 CamelCase is the original wiki convention for creating hyperlinks, with the additional requirement that the capitals are followed by a lower-case letter; hence “AlabamA” and “ABc” will not be links.
+!CamelCase is the original wiki convention for creating hyperlinks, with the additional requirement that the capitals are followed by a lower-case letter; hence “AlabamA” and “ABc” will not be links.
 == Customizing the Wiki behavior ==
+== Customizing the Wiki behavior
 Some people dislike linking by CamelCase.  While Trac remains faithful to the original Wiki style, it provides a number of ways to accomodate users with different preferences:
  * There's an option (`ignore_missing_pages` in the [wiki:TracIni#wiki-section "[wiki]"] section of TracIni) to simply ignore links to missing pages when the link is written using the CamelCase style, instead of that word being replaced by a gray link followed by a question mark.[[BR]]
    That can be useful when CamelCase style is used to name code artifacts like class names and there's no corresponding page for them.
+While Trac remains faithful to the original Wiki style, it provides a number of ways to accommodate users with different preferences:
+ * To prevent the creation of a new link of a camel-cased word, prefix with '!': `!CamelCase`.
+ * To ignore links to missing pages when the link is written using the CamelCase style, that word can instead be replaced by a gray link followed by a question mark. This is useful in cases when CamelCase style is used to name code artifacts like class names and there's no corresponding page for them. This option can be set in `ignore_missing_pages` in the [wiki:TracIni#wiki-section "[wiki]"] section of TracIni.
  * There's an option (`split_page_names` in the  [wiki:TracIni#wiki-section "[wiki]"] section of TracIni) to automatically insert space characters between the words of a CamelCase link when rendering the link.
  * Creation of explicit Wiki links is also easy, see WikiPageNames for details.
  * In addition, Wiki formatting can be disabled completely in some places (e.g. when rendering commit log messages). See `wiki_format_messages` in the [wiki:TracIni#changeset-section "[changeset]"] section of TracIni.
+ * Wiki formatting can be disabled completely in some places, for example when rendering commit log messages. See `wiki_format_messages` in the [wiki:TracIni#changeset-section "[changeset]"] section of TracIni.
 See TracIni for more information on the available options.
 == More information on !CamelCase ==
+== More information on !CamelCase
  * http://c2.com/cgi/wiki?WikiCase

wiki/pages/InterMapTxt

-                      r26484
+                      r37343
 {{{
+PEP     http://www.python.org/peps/pep-$1.html                                       # Python Enhancement Proposal
+PEP     http://www.python.org/dev/peps/pep-$1/    # Python Enhancement Proposal
+PythonBug    http://bugs.python.org/issue$1       # Python Issue #$1
+Python-issue http://bugs.python.org/issue$1       # Python Issue #$1
+PythonWiki    https://wiki.python.org/moin/       # Python Wiki
 Trac-ML  http://thread.gmane.org/gmane.comp.version-control.subversion.trac.general/ # Message $1 in Trac Mailing List
 trac-dev http://thread.gmane.org/gmane.comp.version-control.subversion.trac.devel/   # Message $1 in Trac Development Mailing List
+apidoc http://www.edgewall.org/docs/trac-trunk/html/$1.html # $1 in the API documentation for Trac
+apiref http://www.edgewall.org/docs/trac-trunk/epydoc/$1.html # $1 in the Epydoc API reference for Trac
+bitten   http://bitten.edgewall.org/intertrac/    # Bitten's Trac
 Mercurial http://www.selenic.com/mercurial/wiki/index.cgi/ # the wiki for the Mercurial distributed SCM
+RFC       http://rfc.net/rfc$1.html # IETF's RFC $1
+hg        http://www.selenic.com/hg/rev/$1?rev=$2          # Changeset $1 $2 in Mercurial repository
+hg-issue  http://mercurial.selenic.com/bts/issue           # Issue $1 in Mercurial BTS
+RFC       http://tools.ietf.org/html/rfc$1          # IETF's RFC $1
+ISO       http://en.wikipedia.org/wiki/ISO_         # ISO Standard $1 in Wikipedia
+kb        http://support.microsoft.com/kb/$1/en-us/ # Article $1 in Microsoft's Knowledge Base
+pypi        http://pypi.python.org/pypi/   # $1 package in the Python Package Index
+CheeseShop  http://pypi.python.org/pypi/           # $1 package in the Python Package Index
+peak        http://peak.telecommunity.com/DevCenter/     # $1 in Python Enterprise Application Kit's Wiki
+setuptools-issue http://bugs.python.org/setuptools/issue # issue$1 in legacy Setuptools tracker
+pypa-setuptools-issue https://bitbucket.org/pypa/setuptools/issue/ # issue #$1 in BitBucket Setuptools tracker
+SQLite      http://www.sqlite.org/cvstrac/wiki?p=$1     # $1 page in the CvsTrac for SQLite
+SQLiteTkt   http://www.sqlite.org/cvstrac/tktview?tn=$1 # Ticket $1 in the CvsTrac for SQLite
+mysql-bugs  http://bugs.mysql.com/bug.php?id=  # Bug #$1 in MySQL's bug database
+mysql-issue http://bugs.mysql.com/bug.php?id=  # Bug #$1 in MySQL's bug database
+MODPYTHON          http://issues.apache.org/jira/browse/MODPYTHON- # Issue $1 in mod_python's JIRA instance
+mod-python-issue   http://issues.apache.org/jira/browse/MODPYTHON- # Issue $1 in mod_python's JIRA instance
+SvnWiki     http://www.orcaware.com/svn/wiki/                        # Subversion Wiki
+svnissue    http://subversion.tigris.org/issues/show_bug.cgi?id=     # Subversion issue #$1
+svn-issue   http://subversion.tigris.org/issues/show_bug.cgi?id=     # Subversion issue #$1
+svncset     http://svn.collab.net/viewvc/svn?view=revision&revision= # Subversion [$1]
+mod-wsgi    http://code.google.com/p/modwsgi/wiki/                 # mod_wsgi Wiki on Google Code
+mod-wsgi-issue  http://code.google.com/p/modwsgi/issues/detail?id= # mod_wsgi Issue Tracker on Google Code
+chromium-issue  http://code.google.com/p/chromium/issues/detail?id=
+Django      http://code.djangoproject.com/intertrac/ # Django's Trac
+AgileTrac   http://www.agile-trac.org/intertrac/     # Plugin adding Iterations to Trac
+CreoleWiki   http://wikicreole.org/wiki/
+Creole1Wiki  http://wikicreole.org/wiki/
+Creole2Wiki  http://wiki.wikicreole.org/
+MediaWiki    http://www.mediawiki.org/wiki/
+SO  http://stackoverflow.com/questions/ # Question $1 in StackOverflow
+Transifex https://www.transifex.com/projects/p/trac/
+kwquery      /query?group=status&keywords=~  # Custom query for tickets matching keyword $1
+#
 …
 DebianBug        http://bugs.debian.org/
 DebianPackage    http://packages.debian.org/
+DebianPTS        http://packages.qa.debian.org/
 Dictionary       http://www.dict.org/bin/Dict?Database=*&Form=Dict1&Strategy=*&Query=
 Google           http://www.google.com/search?q=
+lmgtfy           http://lmgtfy.com/?q= # Well, just search for "$1", follow the link to see how to do it...
 GoogleGroups     http://groups.google.com/group/$1/msg/$2        # Message $2 in $1 Google Group
+gdiscussion      https://groups.google.com/d/topic/$1/$2/discussion # Discussion $2 in $1 Google
+gmessage         https://groups.google.com/d/msg/$1/$2 # Message $2 in $1 Google Group
+gforum           https://groups.google.com/forum/#!forum/$1 # Forum $1 in Google Groups
 JargonFile       http://downlode.org/perl/jargon-redirect.cgi?term=
 MeatBall         http://www.usemod.com/cgi-bin/mb.pl?
 MetaWiki         http://sunir.org/apps/meta.pl?
 MetaWikiPedia    http://meta.wikipedia.org/wiki/
+MoinMoin         http://moinmoin.wikiwikiweb.de/
+MoinMoin         http://moinmo.in/
+TracHacks        http://trac-hacks.org/wiki/
+OSM              http://www.openstreetmap.org/wiki/
 WhoIs            http://www.whois.sc/
 Why              http://clublet.com/c/c/why?
 c2Wiki             http://c2.com/cgi/wiki?
+c2Wiki           http://c2.com/cgi/wiki?
 WikiPedia        http://en.wikipedia.org/wiki/
 }}}
+----
+See also: InterWiki, InterTrac

wiki/pages/InterTrac

-                      r26484
+                      r37343
 = InterTrac Links  =
+= InterTrac Links
 Trac supports a convenient way to refer to resources of other Trac servers, from within the Wiki markup, since version 0.10.
+Trac supports a convenient way to refer to resources of other Trac servers, from within the Wiki markup. An !InterTrac link can be seen as a scoped TracLinks. It is used for referring to a Trac resource located in another Trac environment. A resource can be a wiki page, changeset, ticket or milestone.
+== Definitions ==
+An InterTrac link can be seen as a scoped TracLinks.
+It is used for referring to a Trac resource
+(Wiki page, changeset, ticket, ...) located in another
+Trac environment.
+== List of Active InterTrac Prefixes ==
+== List of Active InterTrac Prefixes
 [[InterTrac]]
 == Link Syntax ==
+== Link Syntax
+Simply use the name of the other Trac environment as a prefix,
+followed by a colon, ending with the resource located in the other environment.
+Simply use the name of the other Trac environment as a prefix, followed by a colon, ending with the resource located in the other environment.
 {{{
 …
 The other resource is specified using a regular TracLinks, of any flavor.
+That target environment name is either the real name of the
+environment, or an alias for it.
+That target environment name is either the real name of the environment or an alias for it.
 The aliases are defined in `trac.ini` (see below).
 The prefix is case insensitive.
 If the InterTrac link is enclosed in square brackets (like `[th:WikiExtrasPlugin]`), the InterTrac prefix is removed in the displayed link, like a normal link resolver would be (i.e. the above would be displayed as `WikiExtrasPlugin`).
+If the InterTrac link is enclosed in square brackets (like `[th:WikiExtrasPlugin]`), the InterTrac prefix is removed in the displayed link like a normal link resolver would be, ie the above would be displayed as `WikiExtrasPlugin`.
+For convenience, there's also some alternative short-hand form,
+where one can use an alias as an immediate prefix
+for the identifier of a ticket, changeset or report:
+(e.g. `#T234`, `[T1508]`, `[trac 1508]`, ...)
+For convenience, there's also some alternative short-hand form, where one can use an alias as an immediate prefix for the identifier of a ticket, changeset or report, eg `#T234`, `[T1508]`, `[trac 1508]`.
 == Examples ==
+== Examples
 It is necessary to setup a configuration for the InterTrac facility.
 …
 Example configuration:
+{{{
+...
+{{{#!ini
 [intertrac]
 # -- Example of setting up an alias:
 …
 The `.url` is mandatory and is used for locating the other Trac.
+This can be a relative URL in case that Trac environment is located
+on the same server.
+This can be a relative URL in case that Trac environment is located on the same server.
+The `.title` information will be used for providing an useful tooltip
+when moving the cursor over an InterTrac links.
+Finally, the `.compat` option can be used to activate or disable
+a ''compatibility'' mode:
+ * If the targeted Trac is running a version below [trac:milestone:0.10 0.10]
+   ([trac:r3526 r3526] to be precise), then it doesn't know how to dispatch an InterTrac
+   link, and it's up to the local Trac to prepare the correct link.
+   Not all links will work that way, but the most common do.
+   This is called the compatibility mode, and is `true` by default.
+ * If you know that the remote Trac knows how to dispatch InterTrac links,
+   you can explicitly disable this compatibility mode and then ''any''
+   TracLinks can become an InterTrac link.
+The `.title` information will be used for providing an useful tooltip when moving the cursor over an InterTrac links.
 Now, given the above configuration, one could create the following links:
 …
    * `trac:changeset:1912` trac:changeset:1912
    * `[T1912]` [T1912]
  * to the log range [3300:3330]: '''(Note: the following ones need `trac.compat=false`)'''
+ * to the log range [3300:3330]:
    * `trac:log:@3300:3330` trac:log:@3300:3330
    * `[trac 3300:3330]` [trac 3300:3330]
  * finally, to link to the start page of a remote trac, simply use its prefix followed by ':', inside an explicit link. Example: `[th: Trac Hacks]` (''since 0.11; note that the ''remote'' Trac has to run 0.11 for this to work'')
+   * `[trac 3300:3330]` [trac 3300:3330]
+   * finally, to link to the start page of a remote trac, simply use its prefix followed by ':', inside an explicit link. Example: `[th: Trac Hacks]` (note that the ''remote'' Trac has to run Trac >= 0.11 for this to work'')
+The generic form `intertrac_prefix:module:id` is translated
+to the corresponding URL `<remote>/module/id`, shorthand links
+are specific to some modules (e.g. !#T234 is processed by the
+ticket module) and for the rest (`intertrac_prefix:something`),
+we rely on the TracSearch#quickjump facility of the remote Trac.
+The generic form `intertrac_prefix:module:id` is translated to the corresponding URL `<remote>/module/id`, shorthand links are specific to some modules (e.g. !#T234 is processed by the ticket module) and for the rest (`intertrac_prefix:something`), we rely on the TracSearch#quickjump facility of the remote Trac.
 ----

wiki/pages/InterWiki

-                      r26484
+                      r37343
 = Support for InterWiki links =
+= Support for InterWiki links
+''(since [trac:milestone:0.10 0.10])''
+== Definition
+== Definition ==
+An InterWiki link can be used for referring to a Wiki page located in another Wiki system, and by extension, to any object located in any other Web application, provided a simple URL mapping can be done.
+An InterWiki link can be used for referring to a Wiki page
+located in another Wiki system, and by extension, to any object
+located in any other Web application, provided a simple URL
+mapping can be done.
+At the extreme, InterWiki prefixes can even be used to simply introduce links to new protocols, such as `tsvn:` used by [trac:TortoiseSvn TortoiseSvn].
+At the extreme, InterWiki prefixes can even be used to simply introduce
+links to new protocols, such as `tsvn:` used by [trac:TortoiseSvn TortoiseSvn].
+== Link Syntax ==
+== Link Syntax
 {{{
 …
 }}}
+The link is composed by the targeted Wiki (or system) name,
+followed by a colon (e.g. `MeatBall:`),
+followed by a page specification in the target.
+The link is composed by the targeted Wiki (or system) name, followed by a colon, eg `MeatBall:`, followed by a page specification in the target.
 Note that, as for InterTrac prefixes, '''InterWiki prefixes are case insensitive'''.
 The target Wiki URL is looked up in the `[interwiki]` section of TracIni or in the InterMapTxt wiki page, modeled after MeatBall:InterMapTxt. If a prefix is defined in both the `[interwiki]` section and InterMapTxt, the `[interwiki]` section takes precedence.
+In addition to traditional InterWiki links, where the target
+is simply ''appended'' to the URL,
+Trac supports parametric InterWiki URLs:
+identifiers `$1`, `$2`, ... in the URL
+will be replaced by corresponding arguments.
+The argument list is formed by splitting the page identifier
+using the ":" separator.
+In addition to traditional InterWiki links, where the target is simply ''appended'' to the URL, Trac supports parametric InterWiki URLs:
+identifiers `$1`, `$2`, ... in the URL will be replaced by corresponding arguments.
+The argument list is formed by splitting the page identifier using the ":" separator.
+=== [interwiki] ===
+=== [interwiki]
 Every option in the `[interwiki]` section in TracIni defines one InterWiki prefix. The option name defines the prefix. The option value defines the URL, optionally followed by a description separated from the URL by whitespace. Parametric URLs are supported as well.
 …
 }}}
 == Examples ==
+== Examples
 If the following is an excerpt of the InterMapTxt page:
 …
 Then,
+ * `MoinMoin:InterWikiMap` should be rendered as MoinMoin:InterWikiMap
+   and the ''title'' for that link would be "!InterWikiMap in !MoinMoin"
+ * `Trac-ML:4346` should be rendered as Trac-ML:4346
+   and the ''title'' for that link would be "Message 4346 in Trac Mailing List"
+ * `MoinMoin:InterWikiMap` should be rendered as MoinMoin:InterWikiMap and the ''title'' for that link would be "!InterWikiMap in !MoinMoin"
+ * `Trac-ML:4346` should be rendered as Trac-ML:4346 and the ''title'' for that link would be "Message 4346 in Trac Mailing List"
 ----

wiki/pages/PageTemplates

-                      r26484
+                      r37343
+= Wiki Page Templates =
+  ''(since [http://trac.edgewall.org/milestone/0.11 0.11])''
+= Wiki Page Templates
 The default content for a new wiki page can be chosen from a list of page templates.
 That list is generated from all the wiki pages having a name starting with ''PageTemplates/''.
 The initial content of a new page will simply be the content of the chosen template page, or a blank page if the special ''(blank page)'' entry is selected. When there are no wiki pages with the ''PageTemplates/'' prefix, the initial content will always be the blank page and the list selector will not be shown (i.e. this matches the behavior we had up to now).
+The initial content of a new page will simply be the content of the chosen template page, or a blank page if the special ''(blank page)'' entry is selected. When there are no wiki pages with the ''PageTemplates/'' prefix, the initial content will always be the blank page and the list selector will not be shown, ie this matches the behavior we had up to now.
 To create a new template, simply create a new page having a name starting with ''PageTemplates/''.
+(Hint: one could even create a ''!PageTemplates/Template'' for facilitating the creation of new templates!)
+Hint: one could even create a ''!PageTemplates/Template'' for facilitating the creation of new templates!
 After the first template has been created, a drop-down selection box will automatically appear on any new wiki pages that are created.  By default it is located on the right side of the 'Create this page' button. The default selection will be ''blank page'', or ''!DefaultPage'' if ''!PageTemplates/DefaultPage'' exists.
+After the first template has been created, a drop-down selection box will automatically appear on any new wiki pages that are created. By default it is located on the right side of the 'Create this page' button. The default selection will be ''blank page'', or ''!DefaultPage'' if ''!PageTemplates/DefaultPage'' exists.
 Available templates:
 [[TitleIndex(PageTemplates/)]]
 ----
 See also: TracWiki

wiki/pages/TracAccessibility

-                      r26484
+                      r37343
 = Accessibility Support in Trac =
 Not every user has a graphic environment with a mouse or other pointing device. Some users rely on keyboard, alternative keyboard or voice input to navigate links, activate form controls, etc. In Trac, we work to assure users may interact with devices other than a pointing device.
+Not every user has a graphic environment with a mouse or other pointing device. Some users rely on keyboard, alternative keyboard or voice input to navigate links, activate form controls, etc. In a Trac session, users can use devices other than a pointing device by enabling keyboard shortcuts through the [/prefs/keybindings Keyboard Shortcuts] preferences panel.
+The keyboard shortcuts must be enabled for a session through the [/prefs/keybindings Keyboard Shortcuts] preferences panel.
+Trac supports accessibility keys for the most common operations.
+ - on Linux platforms, press any of the keys listed below in combination with the `<Alt>` key
+ - on a Mac, use the `<ctrl>` key instead
+ - on Windows, you need to hit `<Shift> + <Alt> + <Key>`. This works for most browsers (Firefox, Chrome, Safari and Internet Explorer)
+Trac supports accessibility keys for the most common operations. The access keys differ by browser and the following work for several browsers, but see [http://en.wikipedia.org/wiki/Access_key#Access_in_different_browsers access in different browsers] for more details.
+ - on Linux platforms, press any of the keys listed below in combination with the `<Alt>` key
+ - on a Mac, use the `<Ctrl>` + `<Opt>` key instead
+ - on Windows, you need to hit `<Shift> + <Alt> + <Key>`. This works for the most common browsers, such as Firefox, Chrome, Safari and Internet Explorer
 == Global Access Keys ==
  * `1` - WikiStart
  * `2` - [wiki:TracTimeline Timeline]
  * `3` - [wiki:TracRoadmap Roadmap]
  * `4` - [wiki:TracSearch Search]
  * `6` - [wiki:TracGuide Trac Guide / Documentation]
  * `7` - [wiki:TracTickets New Ticket]
+ * `2` - [TracTimeline Timeline]
+ * `3` - [TracRoadmap Roadmap]
+ * `4` - [TracSearch Search]
+ * `6` - [TracGuide Trac Guide / Documentation]
+ * `7` - [TracTickets New Ticket]
  * `9` - [/about About Trac]
  * `0` - This page
  * `e` - Edit this page
+ * `e` - Edit (wiki or report)
+ * `r` - Preview (wiki or ticket)
  * `f` - Search

wiki/pages/TracAdmin

-                      r26484
+                      r37343
+= TracAdmin =
+= TracAdmin
+[[PageOutline(2-5, Contents, floated)]]
 [[TracGuideToc]]
 Trac is distributed with a powerful command-line configuration tool. This tool can be used  to configure and customize your Trac-installation to better fit your needs.
 Some of those operations can also be performed via the ''Admin'' web interface, an updated version of the [trac:WebAdmin] plugin now integrated within Trac (since version 0.11).
+Some of those operations can also be performed via the web administration module.
 == Usage ==
+== Usage
 For nearly every `trac-admin` command, you'll need to specify the path to the TracEnvironment that you want to administer as the first argument, for example:
 …
 [[TracAdminHelp(initenv)]]
 It supports an extra `--inherit` option, which can be used to specify a global configuration file which can be used share settings between several environments. You can also inherit from a shared configuration afterwards, by setting the `[inherit] file` option in the `conf/trac.ini` file in your newly created environment, but the advantage of specifying the inherited configuration file at environment creation time is that only the options ''not'' already specified in the global configuration file will be written in the created environment's `conf/trac.ini` file.
+It supports an extra `--inherit` option, which can be used to specify a global configuration file which can be used to share settings between several environments. You can also inherit from a shared configuration afterwards, by setting the `[inherit] file` option in the `conf/trac.ini` file in your newly created environment, but the advantage of specifying the inherited configuration file at environment creation time is that only the options ''not'' already specified in the global configuration file will be written in the created environment's `conf/trac.ini` file.
 See TracIni#GlobalConfiguration.
 Note that in version 0.11 of Trac, `initenv` lost an extra last argument `<templatepath>`, which was used in previous versions to point to the `templates` folder. If you are using the one-liner '`trac-admin /path/to/trac/ initenv <projectname> <db> <repostype> <repospath>`' in the above and getting an error that reads ''''`Wrong number of arguments to initenv: 4`'''', then this is because you're using a `trac-admin` script from an '''older''' version of Trac.
 == Interactive Mode ==
+== Interactive Mode
 When passing the environment path as the only argument, `trac-admin` starts in interactive mode.
 …
 }}}
 == Full Command Reference ==
+== Full Command Reference
 You'll find below the detailed help for all the commands available by default in `trac-admin`. Note that this may not match the list given by `trac-admin <yourenv> help`, as the commands  pertaining to components disabled in that environment won't be available and conversely some plugins activated in the environment can add their own commands.

wiki/pages/TracBackup

-                      r26484
+                      r37343
+= Trac Backup =
+= Trac Backup
 [[TracGuideToc]]
 Since Trac uses a database backend, some extra care is required to safely create a backup of a [wiki:TracEnvironment project environment]. Luckily, [wiki:TracAdmin trac-admin] has a command to make backups easier: `hotcopy`.
+Backups are simply a copied snapshot of the entire [wiki:TracEnvironment project environment] directory, including the database. Backups can be created using the `hotcopy` command in [wiki:TracAdmin trac-admin].
+  ''Note: Trac uses the `hotcopy` nomenclature to match that of [http://subversion.tigris.org/ Subversion], to make it easier to remember when managing both Trac and Subversion servers.''
+'''Note''': Trac uses the `hotcopy` nomenclature to match that of [http://subversion.tigris.org/ Subversion], to make it easier to remember when managing both Trac and Subversion servers.
 == Creating a Backup ==
+== Creating a Backup
+To create a backup of a live TracEnvironment, simply run:
+{{{
+  $ trac-admin /path/to/projenv hotcopy /path/to/backupdir
+To create a backup of a live TracEnvironment simply run:
+{{{#!sh
+$ trac-admin /path/to/projenv hotcopy /path/to/backupdir
 }}}
 [wiki:TracAdmin trac-admin] will lock the database while copying.''
+[wiki:TracAdmin trac-admin] will lock the database while copying.
 The resulting backup directory is safe to handle using standard file-based backup tools like `tar` or `dump`/`restore`.
 Please, note, that hotcopy command does not overwrite target directory and when such exists, hotcopy ends with error: `Command failed: [Errno 17] File exists:` This is discussed in [trac:ticket:3198 #3198].
+Please note, the `hotcopy` command will not overwrite a target directory and when such exists, the operation ends with an error: `Command failed: [Errno 17] File exists:` This is discussed in [trac:ticket:3198 #3198].
 === Restoring a Backup ===
+=== Restoring a Backup
+Backups are simply a copied snapshot of the entire [wiki:TracEnvironment project environment] directory, including the SQLite database.
+To restore an environment from a backup, stop the process running Trac, ie the Web server or [wiki:TracStandalone tracd], restore the contents of your backup (path/to/backupdir) to your [wiki:TracEnvironment project environment] directory and restart the service.
+To restore an environment from a backup, stop the process running Trac (i.e. the Web server or [wiki:TracStandalone tracd]), restore the contents of your backup (path/to/backupdir) to your [wiki:TracEnvironment project environment] directory and restart the service.
+To restore a PostgreSQL database backup, use the command:
+{{{#!sh
+psql -U <user> -d <database> -f postgresql.dump
+}}}
+The `<database>` option is the same as the [TracEnvironment#DatabaseConnectionStrings database connection string] in the `[trac]` `database` option of //trac.ini//.
 ----

wiki/pages/TracBatchModify

-                      r26484
+                      r37343
 [[TracGuideToc]]
 From [wiki:TracQuery custom query] results Trac provides support for modifying a batch of tickets in one request.
+Trac supports modifying a batch of tickets in one request from [TracQuery custom query] results .
 To perform a batch modification select the tickets you wish to modify and set the new field values using the section underneath the query results.
+To perform a batch modification, select the tickets you wish to modify and set the new field values using the section underneath the query results.
 == List fields
+The `Keywords` and `Cc` fields are treated as lists, where list items can be added and/or removed in addition of replacing the entire list value. All list field controls accept multiple items (i.e. multiple keywords or cc addresses).
+The `Keywords` and `Cc` fields are treated as lists, where list items can be added and/or removed in addition of replacing the entire list value. All list field controls accept multiple items, such as multiple keywords or cc addresses.
+== Excluded fields
+Multi-line text fields are not supported, because no valid use-case has been presented for syncing them across several tickets. That restriction applies to the `Description` field as well as to any [TracTicketsCustomFields#AvailableFieldTypesandOptions custom field] of type 'textarea'. However, future versions of Trac could support in conjunction with more suitable actions like 'prepend', 'append' or 'search & replace' ([http://trac-hacks.org/ticket/2415 th:#2415]).

wiki/pages/TracBrowser

-                      r26484
+                      r37343
+= The Trac Repository Browser =
+= The Trac Repository Browser
 [[TracGuideToc]]
+The Trac repository browser can be used to browse specific revisions of directories
+and files stored in the repositories associated with the Trac environment.
+The Trac repository browser can be used to browse specific revisions of directories and files stored in the repositories associated with the Trac environment.
+''(since 0.12)'':
+At the top-level of the repository browser is the '''Repository Index''',
+listing all the configured repositories.
+Each repository has a name which is used as a path prefix in a
+"virtual" file hierarchy encompassing all the available repositories.
+One of the repositories can be configured with an empty name; this is the default repository.  When such a default repository is present, its top-level files and directories
+are also listed, in a '''Default Repository''' section placed before the
+repository index. If the default repository is the only repository associated
+with the Trac environment the '''Repository Index''' will be omitted ^[#note-multirepos (1)]^.
+At the top-level of the repository browser is the '''Repository Index''', listing all the configured repositories.
+Each repository has a name which is used as a path prefix in a "virtual" file hierarchy encompassing all the available repositories.
+One of the repositories can be configured with an empty name; this is the default repository. When such a default repository is present, its top-level files and directories are also listed, in a '''Default Repository''' section placed before the repository index. If the default repository is the only repository associated with the Trac environment, then the '''Repository Index''' will be omitted. This means that after upgrading a single-repository Trac of version 0.11 (or earlier) to a multi-repository Trac (0.12), the repository browser will look and feel the same, that single repository becoming automatically the "default" repository.
+Directory entries are displayed in a list with sortable columns. The list
+entries can be sorted by ''Name'', ''Size'', ''Age'' or ''Author'' by clicking on the column
+headers. The sort order can be reversed by clicking on a given column
+header again.
+Directory entries are displayed in a list with sortable columns. The list entries can be sorted by ''Name'', ''Size'', ''Age'' or ''Author'' by clicking on the column headers. The sort order can be reversed by clicking on a given column header again.
+The browser can be used to navigate through the directory structure
+by clicking on the directory names.
+The browser can be used to navigate through the directory structure by clicking on the directory names.
 Clicking on a file name will show the contents of the file.
+Clicking on the revision number of a file or directory will take
+you to the TracRevisionLog for that file.
+Note that there's also a ''Revision Log'' navigation link that will do the
+same for the path currently being examined.
+Clicking on the ''diff'' icon after revision number will display the changes made
+to the files modified in that revision.
+Clicking on the revision number of a file or directory will take you to the TracRevisionLog for that file.
+Note that there's also a ''Revision Log'' navigation link that will do the same for the path currently being examined.
+Clicking on the ''diff'' icon after revision number will display the changes made to the files modified in that revision.
 Clicking on the ''Age'' of the file - will take you to that changeset in the timeline.
+It's also possible to browse directories or files as they were in history,
+at any given repository revision. The default behavior is to display the
+latest revision but another revision number can easily be selected using
+the ''View revision'' input field at the top of the page.
+It's also possible to browse directories or files as they were in history, at any given repository revision. The default behavior is to display the latest revision but another revision number can easily be selected using the ''View revision'' input field at the top of the page.
+The color bar next to the ''Age'' column gives a visual indication of the age
+of the last change to a file or directory, following the convention that
+'''[[span(style=color:#88f,blue)]]''' is oldest and '''[[span(style=color:#f88,red)]]'''
+is newest, but this can be [TracIni#browser-section configured].
+The color bar next to the ''Age'' column gives a visual indication of the age of the last change to a file or directory, following the convention that '''[[span(style=color:#88f,blue)]]''' is oldest and '''[[span(style=color:#f88,red)]]''' is newest, but this can be [TracIni#browser-section configured].
+At the top of the browser page, there's a ''Visit'' drop-down menu which you can use
+to select some interesting places in the repository, for example branches or tags.
+At the top of the browser page, there's a ''Visit'' drop-down menu which you can use to select some interesting places in the repository, for example branches or tags.
 This is sometimes referred to as the ''browser quickjump'' facility.
 The precise meaning and content of this menu depends on your repository backend.
+For Subversion, this list contains by default the top-level trunk directory
+and sub-directories of the top-level branches and tags directories
+(`/trunk`, `/branches/*`, and `/tags/*`).  This can be [TracIni#svn-section configured]
+for more advanced cases.
+For Subversion, this list contains by default the top-level trunk directory and sub-directories of the top-level branches and tags directories (`/trunk`, `/branches/*`, and `/tags/*`). This can be [TracIni#svn-section configured] for more advanced cases.
+If you're using a Javascript enabled browser, you'll be able to expand and
+collapse directories in-place by clicking on the arrow head at the right side of a
+directory. Alternatively, the [trac:TracKeys keyboard] can also be used for this:
+ - use `'j'` and `'k'` to select the next or previous entry, starting with the first
+ - `'o'` (open) to toggle between expanded and collapsed state of the selected
+If you're using a Javascript enabled browser, you'll be able to expand and collapse directories in-place by clicking on the arrow head at the right side of a directory. Alternatively, the [trac:TracKeys keyboard] can also be used for this:
+ - use `j` and `k` to select the next or previous entry, starting with the first
+ - `o` ('''o'''pen) to toggle between expanded and collapsed state of the selected
    directory or for visiting the selected file
+ - `'v'` (view, visit) and `'<Enter>'`, same as above
+ - `'r'` can be used to force the reload of an already expanded directory
+ - `'A'` can be used to directly visit a file in annotate (blame) mode
+ - `'L'` to view the log for the selected entry
+If no row has been selected using `'j'` or `'k'` these keys will operate on the entry under the mouse.
+{{{#!comment
+MMM: I guess that some keys are upper case and some lower to avoid conflicts with browser defined keys.
+I find for example in Firefox and IE on windows that 'a' works as well as 'A' but 'l' does not work for 'L'.
+ cboos: 'l' is reserved for Vim like behavior, see #7867
+}}}
+ - `v` ('''v'''iew, '''v'''isit) and `<Enter>`, same as above
+ - `r` can be used to force the '''r'''eload of an already expanded directory
+ - `a` can be used to directly visit a file in '''a'''nnotate (blame) mode
+ - `l` to view the '''l'''og for the selected entry
+If no row has been selected using `j` or `k` these keys will operate on the entry under the mouse.
 For the Subversion backend, some advanced additional features are available:
+ - The `svn:needs-lock` property will be displayed
+ - Support for the `svn:mergeinfo` property showing the merged and eligible information
+ - Support for browsing the `svn:externals` property
+   (which can be [TracIni#svn:externals-section configured])
+ - The `svn:mime-type` property is used to select the syntax highlighter for rendering
+   the file. For example, setting `svn:mime-type` to `text/html` will ensure the file is
+   highlighted as HTML, regardless of the file extension. It also allows selecting the character
+   encoding used in the file content. For example, if the file content is encoded in UTF-8,
+   set `svn:mime-type` to `text/html;charset=utf-8`. The `charset=` specification overrides the
+   default encoding defined in the `default_charset` option of the `[trac]` section
+   of [TracIni#trac-section trac.ini].
+ - The `svn:needs-lock` property will be displayed.
+ - Support for the `svn:mergeinfo` property showing the merged and eligible information.
+ - Support for browsing the `svn:externals` property, which can be [TracIni#svn:externals-section configured].
+ - The `svn:mime-type` property is used to select the syntax highlighter for rendering the file. For example, setting `svn:mime-type` to `text/html` will ensure the file is highlighted as HTML, regardless of the file extension. It also allows selecting the character encoding used in the file content. For example, if the file content is encoded in UTF-8, set `svn:mime-type` to `text/html;charset=utf-8`. The `charset=` specification overrides the default encoding defined in the `default_charset` option of the `[trac]` section of [TracIni#trac-section trac.ini].
 {{{#!comment
 MMM: I found this section a bit hard to understand. I changed the first item as I understood that well.
 …
 }}}
 ----
-{{{#!div style="font-size:85%"
-[=#note-multirepos (1)] This means that after upgrading a single-repository Trac of version
-.11 (or below) to a multi-repository Trac (0.12), the repository browser will look and feel
-the same, that single repository becoming automatically the "default" repository.
-}}}
 See also: TracGuide, TracChangeset, TracFineGrainedPermissions

wiki/pages/TracCgi

-                      r26484
+                      r37343
+= Installing Trac as CGI =
+= Installing Trac as CGI
+[[TracGuideToc]]
+[[PageOutline]]
+{{{
+#!div class=important
+  ''Please note that using Trac via CGI is the slowest deployment method available. It is slower than [TracModPython mod_python], [TracFastCgi FastCGI] and even [trac:TracOnWindowsIisAjp IIS/AJP] on Windows.''
+{{{#!div class=important
+ ''Please note that using Trac via CGI is the slowest deployment method available. It is slower than [TracModPython mod_python], [TracFastCgi FastCGI] and even [trac:TracOnWindowsIisAjp IIS/AJP] on Windows.''
 }}}
+CGI script is the entrypoint that web-server calls when a web-request to an application is made. To generate the `trac.cgi` script run:
+{{{
+trac-admin /path/to/env deploy /path/to/www/trac
+}}}
+`trac.cgi` will be in the `cgi-bin` folder inside the given path. ''Make sure it is executable by your web server''. This command also copies `static resource` files to a `htdocs` directory of a given destination.
+CGI script is the entrypoint that web-server calls when a web-request to an application is made. The `trac.cgi` script can be created using the `trac-admin <env> deploy <dir>` command which automatically substitutes the required paths, see TracInstall#cgi-bin. Make sure the script is executable by your web server.
 == Apache web-server configuration ==
+== Apache web-server configuration
 In [http://httpd.apache.org/ Apache] there are two ways to run Trac as CGI:
 . Use a `ScriptAlias` directive that maps an URL to the `trac.cgi` script (recommended)
 . Copy the `trac.cgi` file into the directory for CGI executables used by your web server (commonly named `cgi-bin`). You can also create a symbolic link, but in that case make sure that the `FollowSymLinks` option is enabled for the `cgi-bin` directory.
+. Copy the `trac.cgi` file into the directory for CGI executables used by your web server (commonly named `cgi-bin`). You can also create a symbolic link, but in that case make sure that the `FollowSymLinks` option is enabled for the `cgi-bin` directory.
 To make Trac available at `http://yourhost.example.org/trac` add `ScriptAlias` directive to Apache configuration file, changing `trac.cgi` path to match your installation:
 {{{
+{{{#!apache
 ScriptAlias /trac /path/to/www/trac/cgi-bin/trac.cgi
 }}}
 …
 If you're using Trac with a single project you need to set its location using the `TRAC_ENV` environment variable:
 {{{
+{{{#!apache
 <Location "/trac">
   SetEnv TRAC_ENV "/path/to/projectenv"
 …
 Or to use multiple projects you can specify their common parent directory using the `TRAC_ENV_PARENT_DIR` variable:
 {{{
+{{{#!apache
 <Location "/trac">
   SetEnv TRAC_ENV_PARENT_DIR "/path/to/project/parent/dir"
 …
  ''Note that the `SetEnv` directive requires enabled `mod_env` module. It is also possible to set TRAC_ENV in trac.cgi. Just add the following code between "try:" and "from trac.web ...":''
 {{{
+{{{#!python
     import os
     os.environ['TRAC_ENV'] = "/path/to/projectenv"
 …
  '' Or for TRAC_ENV_PARENT_DIR: ''
 {{{
+{{{#!python
     import os
     os.environ['TRAC_ENV_PARENT_DIR'] = "/path/to/project/parent/dir"
 }}}
 If you are using the [http://httpd.apache.org/docs/suexec.html Apache suEXEC] feature please see [http://trac.edgewall.org/wiki/ApacheSuexec].
+If you are using the [http://httpd.apache.org/docs/suexec.html Apache suEXEC] feature please see [trac:ApacheSuexec].
 On some systems, you ''may'' need to edit the shebang line in the `trac.cgi` file to point to your real Python installation path. On a Windows system you may need to configure Windows to know how to execute a .cgi file (Explorer -> Tools -> Folder Options -> File Types -> CGI).
 === Using WSGI ===
+=== Using WSGI
 You can run a [http://henry.precheur.org/python/how_to_serve_cgi WSGI handler] [http://pythonweb.org/projects/webmodules/doc/0.5.3/html_multipage/lib/example-webserver-web-wsgi-simple-cgi.html under CGI].  You can [wiki:TracModWSGI#Thetrac.wsgiscript write your own application function], or use the deployed trac.wsgi's application.
 == Mapping Static Resources ==
+== Mapping Static Resources
 See TracInstall#MappingStaticResources.
 == Adding Authentication ==
+== Adding Authentication
 See TracInstall#ConfiguringAuthentication.

wiki/pages/TracChangeset

-                      r26484
+                      r37343
 [[TracGuideToc]]
 Trac has a built-in functionality for visualizing “diffs” - changes to files.
+Trac has a built-in functionality for visualizing “diffs”, or changes to files.
+There are different kinds of ''change sets''.
+Some can correspond to revisions made in the repositories,
+others can aggregate changes made in several revisions,
+but in the end, any kind of differences can be shown.
+There are different kinds of ''change sets''.  Some correspond to revisions made in the repositories, others aggregate changes made in several revisions. Ultimately, any kind of difference can be shown.
+The changeset view consists of two parts, the ''header''
+and the ''diff views''.
+The changeset view consists of two parts, the ''header'' and the ''diff views''.
 == Changeset Header ==
 …
  * Files — A list of files affected by this changeset
+If more than one revision is involved in the set of changes being
+displayed, the ''Timestamp'', ''Author'' and ''Message'' fields
+won't be shown.
+If more than one revision is involved in the set of changes being displayed, the ''Timestamp'', ''Author'' and ''Message'' fields will not be shown.
+In front of each listed file, you'll find  a colored rectangle. The color
+indicates how the file is affected by the changeset.
+A colored rectangle indicates how the file is affected by the changeset:
  [[span(style=background:#bfb;border:1px solid #999;font-size:80%;margin-right:.5em,''  '')]] Green: Added \\
 …
 == Diff Views ==
 Below the header is the main part of the changeset, the diff view. Each file is shown in a separate section, each of which will contain only the regions of the file that are affected by the changeset. There are two different styles of displaying the diffs: ''inline'' or ''side-by-side'' (you can switch between those styles using the preferences form):
+Below the header is the main part of the changeset, the diff view. Each file is shown in a separate section, each of which contains only the regions of the file that are affected by the changeset. There are two different styles to display the diffs: ''inline'' or ''side-by-side''. You can switch between the styles using the preferences form:
  * The ''inline'' style shows the changed regions of a file underneath each other. A region removed from the file will be colored red, an added region will be colored green. If a region was modified, the old version is displayed above the new version. Line numbers on the left side indicate the exact position of the change in both the old and the new version of the file.
  * The ''side-by-side'' style shows the old version on the left and the new version on the right (this will typically require more screen width than the inline style.) Added and removed regions will be colored in the same way as with the inline style (green and red, respectively), but modified regions will have a yellow background.
+ * The ''inline'' style shows the changed regions of a file underneath each other. A region removed from the file will be colored red, an added region will be colored green. If a region was modified, the old version is displayed above the new version. Line numbers indicate the exact position of the change in both the old and the new version of the file.
+ * The ''side-by-side'' style shows the old version on the left and the new version on the right and this will typically require more screen width than the inline style. Added and removed regions will be colored in the same way as with the inline style (green and red), and modified regions will have a yellow background.
 In addition, various advanced options are available in the preferences form for adjusting the display of the diffs:
+ * You can set how many lines are displayed before and after every change
+   (if the value ''all'' is used, then the full file will be shown)
+ * You can toggle whether blank lines, case changes and white space changes are ignored, thereby letting you find the functional changes more quickly
+ * You can set how many lines are displayed before and after every change; if the value ''all'' is used, then the full file will be shown.
+ * You can toggle whether blank lines, case changes and white space changes are ignored, thereby letting you find the functional changes more quickly.
 == The Different Ways to Get a Diff ==
 …
 === Examining a Changeset ===
+When viewing a repository check-in, such as when following a
+changeset [wiki:TracLinks link] or a changeset event in the
+[wiki:TracTimeline timeline], Trac will display the exact changes
+made by the check-in.
+When viewing a repository check-in, such as when following a changeset [wiki:TracLinks link] or a changeset event in the [wiki:TracTimeline timeline], Trac will display the exact changes made by the check-in.
+There will be also navigation links to the ''Previous Changeset''
+to and ''Next Changeset''.
+There will be also navigation links to the ''Previous Changeset'' to and ''Next Changeset''.
 === Examining Differences Between Revisions ===
+Often you'll want to look at changes made on a file
+or on a directory spanning multiple revisions. The easiest way
+to get there is from the TracRevisionLog, where you can select
+the ''old'' and the ''new'' revisions of the file or directory, and
+then click the ''View changes'' button.
+Often you want to look at changes made on a file or on a directory spanning multiple revisions. The easiest way to get there is from the TracRevisionLog, where you can select the ''old'' and the ''new'' revisions of the file or directory, and then click the ''View changes'' button.
 === Examining Differences Between Branches ===
+One of the core features of version control systems is the possibility
+to work simultaneously on different ''Lines of Developments'', commonly
+called “branches”. Trac enables you to examine the exact differences
+between such branches.
+One of the core features of version control systems is the possibility to work simultaneously on different ''Lines of Developments'', commonly called “branches”. Trac enables you to examine the exact differences between such branches.
+Using the '''View changes ...''' button in the TracBrowser allows you to enter
+''From:'' and ''To:'' path/revision pairs. The resulting set of differences consist
+of the changes that should be applied to the ''From:'' content in order
+to get to the ''To:'' content.
+Using the '''View changes ...''' button in the TracBrowser allows you to enter ''From:'' and ''To:'' path/revision pairs. The resulting set of differences consist of the changes that should be applied to the ''From:'' content to get to the ''To:'' content.
+For convenience, it is possible to invert the roles of the ''old'' and the ''new''
+path/revision pairs by clicking the ''Reverse Diff'' link on the changeset page.
+For convenience, it is possible to invert the roles of the ''old'' and the ''new'' path/revision pairs by clicking the ''Reverse Diff'' link on the changeset page.
 === Checking the Last Change ===
+The last possibility for examining changes is to use the ''Last Change''
+link provided by the TracBrowser.
+Another way to examine changes is to use the ''Last Change'' link provided by the TracBrowser.
+This link will take you to the last change that was made on that path.
+From there, you can use the ''Previous Change'' and ''Next Change'' links
+to traverse the change history of the file or directory.
+This link will take you to the last change that was made on that path. From there, you can use the ''Previous Change'' and ''Next Change'' links to traverse the change history of the file or directory.
 ----

wiki/pages/TracEnvironment

-                      r26484
+                      r37343
 = The Trac Environment =
+= The Trac Environment
+Trac uses a directory structure and a database for storing project data. The directory is referred to as the “environment”.
+[[TracGuideToc]]
+[[PageOutline(2-5)]]
+== Creating an Environment ==
+Trac uses a directory structure and a database for storing project data. The directory is referred to as the environment.
+A new Trac environment is created using  [TracAdmin#initenv trac-admin's initenv]:
+{{{
+== Creating an Environment
+A new Trac environment is created using [TracAdmin#initenv trac-admin's initenv]:
+{{{#!sh
 $ trac-admin /path/to/myproject initenv
 }}}
+`trac-admin` will ask you for the name of the project and the
+database connection string (explained below).
+`trac-admin` will ask you for the name of the project and the database connection string, see below.
 === Some Useful Tips
+ - The user under which the web server runs will require file system write permission to
  the environment directory and all the files inside. Please remember to set
+ the appropriate permissions. The same applies to the source code repository,
  although the user under which Trac runs will only require write access to a Subversion repository created with the BDB file system; for other repository types, check the corresponding plugin's documentation.
+=== Useful Tips
+ - Place your environment's directory on a filesystem which supports sub-second timestamps, as Trac monitors the timestamp of its configuration files and changes happening on a filesystem with too coarse-grained timestamp resolution may go undetected in Trac < 1.0.2. This is also true for the location of authentication files when using TracStandalone.
+ - The user under which the web server runs will require file system write permission to the environment directory and all the files inside. Please remember to set the appropriate permissions. The same applies to the source code repository, although the user under which Trac runs will only require write access to a Subversion repository created with the BDB file system; for other repository types, check the corresponding plugin's documentation.
  - `initenv`, when using an svn repository, does not imply that trac-admin will perform `svnadmin create` for the specified repository path. You need to perform the `svnadmin create` prior to `trac-admin initenv` if you're creating a new svn repository altogether with a new trac environment, otherwise you will see a message "Warning: couldn't index the repository" when initializing the environment.
+ - `initenv`, when using an svn repository, does not imply that trac-admin will perform `svnadmin create` for the specified repository path. You need to perform the `svnadmin create` prior to `trac-admin initenv` if you're creating a new svn repository altogether with a new Trac environment; otherwise you will see a message "Warning: couldn't index the repository" when initializing the environment.
  - Non-ascii environment paths are not supported
+ - Non-ascii environment paths are not supported.
  - Also, it seems that project names with spaces can be problematic for authentication (see [trac:#7163]).
+ - Also, it seems that project names with spaces can be problematic for authentication, see [trac:#7163].
  - TracPlugins located in a [TracIni#inherit-section shared plugins folder] that is defined in an [TracIni#GlobalConfiguration inherited configuration] are currently not loaded during creation, and hence, if they need to create extra tables for example, you'll need to [TracUpgrade#UpgradetheTracEnvironment upgrade the environment] before being able to use it.
+== Database Connection Strings ==
+{{{#!div style="border: 1pt dotted; margin: 1em"
+**Caveat:** don't confuse the //Trac environment directory// with the //source code repository directory//.
+Since version 0.9, Trac supports both [http://sqlite.org/ SQLite] and
+[http://www.postgresql.org/ PostgreSQL] database backends.  Preliminary
+support for [http://mysql.com/ MySQL] was added in 0.10.  The default is
+to use SQLite, which is probably sufficient for most projects. The database
+file is then stored in the environment directory, and can easily be
+[wiki:TracBackup backed up] together with the rest of the environment.
+This is a common beginners' mistake.
+It happens that the structure for a Trac environment is loosely modeled after the Subversion repository directory structure, but those are two disjoint entities and they are not and //must not// be located at the same place.
+}}}
+=== SQLite Connection String ===
+== Database Connection Strings
+Trac supports [http://sqlite.org/ SQLite], [http://www.postgresql.org/ PostgreSQL] and [http://mysql.com/ MySQL] database backends. The default is SQLite, which is probably sufficient for most projects. The database file is then stored in the environment directory, and can easily be [wiki:TracBackup backed up] together with the rest of the environment.
+Note that if the username or password of the connection string (if applicable) contains the `:`, `/` or `@` characters, they need to be URL encoded.
+=== SQLite Connection String
 The connection string for an SQLite database is:
 {{{
 …
 where `db/trac.db` is the path to the database file within the Trac environment.
+=== PostgreSQL Connection String ===
+If you want to use PostgreSQL or MySQL instead, you'll have to use a
+different connection string. For example, to connect to a PostgreSQL
+database on the same machine called `trac`, that allows access to the
+user `johndoe` with the password `letmein`, use:
+=== PostgreSQL Connection String
+If you want to use PostgreSQL instead, you'll have to use a different connection string. For example, to connect to a PostgreSQL database on the same machine called `trac` for user `johndoe` with the password `letmein` use:
 {{{
 postgres://johndoe:letmein@localhost/trac
 }}}
-''Note that due to the way the above string is parsed, the "/" and "@" characters cannot be part of the password.''
 If PostgreSQL is running on a non-standard port (for example 9342), use:
+If PostgreSQL is running on a non-standard port, for example 9342, use:
 {{{
 postgres://johndoe:letmein@localhost:9342/trac
 }}}
+On UNIX, you might want to select a UNIX socket for the transport,
+either the default socket as defined by the PGHOST environment variable:
+On UNIX, you might want to select a UNIX socket for the transport, either the default socket as defined by the PGHOST environment variable:
 {{{
 postgres://user:password@/database
 }}}
 or a specific one:
 {{{
 …
 }}}
+Note that with PostgreSQL you will have to create the database before running
+`trac-admin initenv`.
+Note that with PostgreSQL you will have to create the database before running `trac-admin initenv`.
 See the [http://www.postgresql.org/docs/ PostgreSQL documentation] for detailed instructions on how to administer [http://postgresql.org PostgreSQL].
+Generally, the following is sufficient to create a database user named `tracuser`, and a database named `trac`.
+{{{
+createuser -U postgres -E -P tracuser
+createdb -U postgres -O tracuser -E UTF8 trac
+}}}
+When running `createuser` you will be prompted for the password for the user 'tracuser'. This new user will not be a superuser, will not be allowed to create other databases and will not be allowed to create other roles. These privileges are not needed to run a trac instance. If no password is desired for the user, simply remove the `-P` and `-E` options from the `createuser` command.  Also note that the database should be created as UTF8. LATIN1 encoding causes errors trac's use of unicode in trac.  SQL_ASCII also seems to work.
+Under some default configurations (debian) one will have run the `createuser` and `createdb` scripts as the `postgres` user.  For example:
+{{{
+sudo su - postgres -c 'createuser -U postgres -S -D -R -E -P tracuser'
+sudo su - postgres -c 'createdb -U postgres -O tracuser -E UTF8 trac'
+Generally, the following is sufficient to create a database user named `tracuser` and a database named `trac`:
+{{{#!sh
+$ createuser -U postgres -E -P tracuser
+$ createdb -U postgres -O tracuser -E UTF8 trac
 }}}
+Trac uses the `public` schema by default but you can specify a different schema in the connection string:
+When running `createuser` you will be prompted for the password for the user 'tracuser'. This new user will not be a superuser, will not be allowed to create other databases and will not be allowed to create other roles. These privileges are not needed to run a Trac instance. If no password is desired for the user, simply remove the `-P` and `-E` options from the `createuser` command. Also note that the database should be created as UTF8. LATIN1 encoding causes errors, because of Trac's use of unicode. SQL_ASCII also seems to work.
+Under some default configurations (Debian) one will have run the `createuser` and `createdb` scripts as the `postgres` user:
+{{{#!sh
+$ sudo su - postgres -c 'createuser -U postgres -S -D -R -E -P tracuser'
+$ sudo su - postgres -c 'createdb -U postgres -O tracuser -E UTF8 trac'
+}}}
+Trac uses the `public` schema by default, but you can specify a different schema in the connection string:
 {{{
 postgres://user:pass@server/database?schema=yourschemaname
 }}}
 === MySQL Connection String ===
+=== MySQL Connection String
+If you want to use MySQL instead, you'll have to use a
+different connection string. For example, to connect to a MySQL
+database on the same machine called `trac`, that allows access to the
+user `johndoe` with the password `letmein`, the mysql connection string is:
+The format of the MySQL connection string is similar to those for PostgreSQL, with the `postgres` scheme being replaced by `mysql`. For example, to connect to a MySQL database on the same machine called `trac` for user `johndoe` with password `letmein`:
 {{{
 mysql://johndoe:letmein@localhost:3306/trac
 }}}
 == Source Code Repository ==
+== Source Code Repository
 Since version 0.12, a single Trac environment can be connected to more than one repository. There are many different ways to connect repositories to an environment, see TracRepositoryAdmin. This page also details the various attributes that can be set for a repository (like `type`, `url`, `description`).
+A single environment can be connected to more than one repository. However, by default Trac is not connected to any source code repository, and the ''Browse Source'' toolbar item will not be displayed.
+In Trac 0.12 `trac-admin` no longer asks questions related to repositories. Therefore, by default Trac is not connected to any source code repository, and the ''Browse Source'' toolbar item will not be displayed.
+You can also explicitly disable the `trac.versioncontrol.*` components (which are otherwise still loaded)
+{{{
+[components]
+trac.versioncontrol.* = disabled
+}}}
+There are many different ways to connect repositories to an environment, see TracRepositoryAdmin. A single repository can be specified when the environment is created by passing the optional arguments `repository_type` and `repository_dir` to the `initenv` command.
+For some version control systems, it is possible to specify not only the path to the repository,
+but also a ''scope'' within the repository. Trac will then only show information
+related to the files and changesets below that scope. The Subversion backend for
+Trac supports this; for other types, check the corresponding plugin's documentation.
+Example of a configuration for a Subversion repository used as the default repository:
+{{{
+[trac]
+repository_type = svn
+repository_dir = /path/to/your/repository
+}}}
+The configuration for a scoped Subversion repository would be:
+{{{
+[trac]
+repository_type = svn
+repository_dir = /path/to/your/repository/scope/within/repos
+}}}
+== Directory Structure ==
+== Directory Structure
 An environment directory will usually consist of the following files and directories:
  * `README` - Brief description of the environment.
+ * `VERSION` - Contains the environment version identifier.
+ * `attachments` - Attachments to wiki pages and tickets are stored here.
+ * `VERSION` - Environment version identifier.
+ * `files`
+  * `attachments` - Attachments to wiki pages and tickets.
  * `conf`
    * `trac.ini` - Main configuration file. See TracIni.
+  * `trac.ini` - Main configuration file. See TracIni.
  * `db`
+   * `trac.db` - The SQLite database (if you're using SQLite).
+ * `htdocs` - directory containing web resources, which can be referenced in Genshi templates using `/htdocs/site/...` URLs. ''(since 0.11)''
+ * `log` - default directory for log files, if logging is turned on and a relative path is given.
+ * `plugins` - Environment-specific [wiki:TracPlugins plugins] (Python eggs or single file plugins, since [trac:milestone:0.10 0.10])
+ * `templates` - Custom Genshi environment-specific templates. ''(since 0.11)''
+   * `site.html` - method to customize header, footer, and style, described in TracInterfaceCustomization#SiteAppearance
+=== Caveat: don't confuse a ''Trac environment directory'' with the ''source code repository directory'' #Caveat
+This is a common beginners' mistake.
+It happens that the structure for a Trac environment is loosely modelled after the Subversion repository directory
+structure, but those are two disjoint entities and they are not and ''must not'' be located at the same place.
+  * `trac.db` - The SQLite database, if you are using SQLite.
+ * `htdocs` - Directory containing web resources, which can be referenced in Genshi templates using `/chrome/site/...` URLs.
+ * `log` - Default directory for log files, if `file` logging is enabled and a relative path is given.
+ * `plugins` - Environment-specific [wiki:TracPlugins plugins].
+ * `templates` - Custom Genshi environment-specific templates.
+  * `site.html` - Method to customize header, footer, and style, described in TracInterfaceCustomization#SiteAppearance.
 ----

wiki/pages/TracFastCgi

-                      r26484
+                      r37343
+[[PageOutline]]
+= Trac with FastCGI =
+= Trac with FastCGI
+[[TracGuideToc]]
+[[PageOutline(2-5, Contents, floated)]]
 [http://www.fastcgi.com/ FastCGI] interface allows Trac to remain resident much like with [wiki:TracModPython mod_python] or [wiki:TracModWSGI mod_wsgi]. It is faster than external CGI interfaces which must start a new process for each request.  Additionally, it is supported by much wider variety of web servers.
 Note that unlike mod_python, FastCGI supports [http://httpd.apache.org/docs/suexec.html Apache SuEXEC], i.e. run with different permissions than web server running with (`mod_wsgi` supports the `WSGIDaemonProcess` with user / group parameters to achieve the same effect).
+Note that unlike mod_python, FastCGI supports [http://httpd.apache.org/docs/suexec.html Apache SuEXEC], ie run with different permissions than the web server runs with. `mod_wsgi` supports the `WSGIDaemonProcess` with user / group parameters to achieve the same effect.
 '''Note for Windows:''' Trac's FastCGI does not run under Windows, as Windows does not implement `Socket.fromfd`, which is used by `_fcgi.py`. If you want to connect to IIS, you may want to try [trac:TracOnWindowsIisAjp AJP]/[trac:TracOnWindowsIisAjp ISAPI].
+[[PageOutline(2-3,Overview,inline)]]
+== Simple Apache configuration ==
+== Simple Apache configuration
 There are two FastCGI modules commonly available for Apache: `mod_fastcgi` and
 …
 The following sections focus on the FCGI specific setup, see also [wiki:TracModWSGI#ConfiguringAuthentication] for configuring the authentication in Apache.
+Regardless of which cgi module is used, be sure the web server has executable permissions on the cgi-bin folder. While FastCGI will throw specific permissions errors, mod_fcgid will throw an ambiguous error if this has not been done. (Connection reset by peer: mod_fcgid: error reading data from FastCGI server)
+=== Set up with `mod_fastcgi` ===
+Regardless of which cgi module is used, be sure the web server has executable permissions on the cgi-bin folder. While FastCGI will throw specific permissions errors, mod_fcgid will throw an ambiguous error if this has not been done. Connection reset by peer: mod_fcgid: error reading data from FastCGI server.
+=== Set up with `mod_fastcgi`
 `mod_fastcgi` uses `FastCgiIpcDir` and `FastCgiConfig` directives that should be added to an appropriate Apache configuration file:
 {{{
 …
 }}}
 === Set up with `mod_fcgid` ===
+Configure `ScriptAlias` (see TracCgi for details), but call `trac.fcgi`
+instead of `trac.cgi`. Note that slash at the end - it is important.
+=== Set up with `mod_fcgid`
+Configure `ScriptAlias` (see TracCgi for details), but call `trac.fcgi` instead of `trac.cgi`:
 {{{
 ScriptAlias /trac /path/to/www/trac/cgi-bin/trac.fcgi/
 }}}
+To set up Trac environment for `mod_fcgid` it is necessary to use
+`DefaultInitEnv` directive. It cannot be used in `Directory` or
+`Location` context, so if you need to support multiple projects, try
+alternative environment setup below.
+Note the slash at the end.
+To set up Trac environment for `mod_fcgid` it is necessary to use `DefaultInitEnv` directive. It cannot be used in `Directory` or `Location` context, so if you need to support multiple projects, try alternative environment setup below.
 {{{
 …
 }}}
+=== alternative environment setup ===
+A better method to specify path to Trac environment is to embed the path
+into `trac.fcgi` script itself. That doesn't require configuration of server
+environment variables, works for both FastCgi modules
+(and for [http://www.lighttpd.net/ lighttpd] and CGI as well):
+=== alternative environment setup
+A better method to specify path to the Trac environment is to embed the path into `trac.fcgi` script itself. That doesn't require configuration of the server environment variables, works for both [trac:FastCgi] modules as well as for [http://www.lighttpd.net/ lighttpd] and CGI:
 {{{
 import os
 os.environ['TRAC_ENV'] = "/path/to/projectenv"
 }}}
 or
+or:
 {{{
 import os
 …
 }}}
+With this method different projects can be supported by using different
+`.fcgi` scripts with different `ScriptAliases`.
+With this method different projects can be supported by using different `.fcgi` scripts with different `ScriptAliases`.
 See [https://coderanger.net/~coderanger/httpd/fcgi_example.conf this fcgid example config] which uses a !ScriptAlias directive with trac.fcgi with a trailing / like this:
 …
 }}}
 == Simple Cherokee Configuration ==
+== Simple Cherokee Configuration
 The configuration on Cherokee's side is quite simple. You will only need to know that you can spawn Trac as an SCGI process.
 You can either start it manually, or better yet, automatically by letting Cherokee spawn the server whenever it is down.
 First set up an information source in cherokee-admin with a local interpreter.
+First set up an information source in cherokee-admin with a local interpreter:
 {{{
 …
 }}}
+== Simple Lighttpd Configuration ==
+The FastCGI front-end was developed primarily for use with alternative webservers, such as [http://www.lighttpd.net/ lighttpd].
+lighttpd is a secure, fast, compliant and very flexible web-server that has been optimized for high-performance
+environments.  It has a very low memory footprint compared to other web servers and takes care of CPU load.
+For using `trac.fcgi`(prior to 0.11) / fcgi_frontend.py (0.11) with lighttpd add the following to your lighttpd.conf:
+== Simple Lighttpd Configuration
+The FastCGI front-end was developed primarily for use with alternative webservers, such as [http://www.lighttpd.net/ Lighttpd].
+Lighttpd is a secure, fast, compliant and very flexible web-server that has been optimized for high-performance environments. It has a very low memory footprint compared to other web servers and takes care of CPU load.
+For using `trac.fcgi`(prior to 0.11) / fcgi_frontend.py (0.11) with Lighttpd add the following to your lighttpd.conf:
 {{{
 #var.fcgi_binary="/usr/bin/python /path/to/fcgi_frontend.py" # 0.11 if installed with easy_setup, it is inside the egg directory
 …
 }}}
+Note that you will need to add a new entry to `fastcgi.server` for each separate Trac instance that you wish to run. Alternatively, you may use the `TRAC_ENV_PARENT_DIR` variable instead of `TRAC_ENV` as described above,
+and you may set one of the two in `trac.fcgi` instead of in `lighttpd.conf`
+using `bin-environment` (as in the section above on Apache configuration).
+Note that lighttpd has a bug related to 'SCRIPT_NAME' and 'PATH_INFO' when the uri of fastcgi.server is '/' instead of '/trac' in this example (see [trac:#2418]). This is fixed in lighttpd 1.5, and under lighttpd 1.4.23 or later the workaround is to add `"fix-root-scriptname" => "enable"` as a parameter of fastcgi.server.
+Note that you will need to add a new entry to `fastcgi.server` for each separate Trac instance that you wish to run. Alternatively, you may use the `TRAC_ENV_PARENT_DIR` variable instead of `TRAC_ENV` as described above, and you may set one of the two in `trac.fcgi` instead of in `lighttpd.conf` using `bin-environment`, as in the section above on Apache configuration.
+Note that Lighttpd has a bug related to 'SCRIPT_NAME' and 'PATH_INFO' when the uri of fastcgi.server is '/' instead of '/trac' in this example (see [trac:#2418]). This is fixed in Lighttpd 1.5, and under Lighttpd 1.4.23 or later the workaround is to add `"fix-root-scriptname" => "enable"` as a parameter of fastcgi.server.
 For using two projects with lighttpd add the following to your `lighttpd.conf`:
 …
+                )
 }}}
+Note that field values are different.  If you prefer setting the environment
+variables in the `.fcgi` scripts, then copy/rename `trac.fcgi`, e.g., to
+`first.fcgi` and `second.fcgi`, and reference them in the above settings.
+Note that the above will result in different processes in any event, even
+if both are running from the same `trac.fcgi` script.
+Note that field values are different. If you prefer setting the environment variables in the `.fcgi` scripts, then copy/rename `trac.fcgi`, eg to `first.fcgi` and `second.fcgi`, and reference them in the above settings.
+Note that the above will result in different processes in any event, even if both are running from the same `trac.fcgi` script.
 {{{
 …
+               )
+}}}
+Note that lighttpd (I use version 1.4.3) stopped if password file doesn't exist.
+Note that lighttpd doesn't support 'valid-user' in versions prior to 1.3.16.
+Conditional configuration is also useful for mapping static resources, i.e. serving out images and CSS directly instead of through FastCGI:
+}}}
+Note that Lighttpd (v1.4.3) stops if the password file doesn't exist.
+Note that Lighttpd doesn't support 'valid-user' in versions prior to 1.3.16.
+Conditional configuration is also useful for mapping static resources, ie serving out images and CSS directly instead of through FastCGI:
 {{{
 # Aliasing functionality is needed
 …
+}
 }}}
 The technique can be easily adapted for use with multiple projects by creating aliases for each of them, and wrapping the fastcgi.server declarations inside conditional configuration blocks.
 Also there is another way to handle multiple projects and it's to use TRAC_ENV_PARENT_DIR instead of TRAC_ENV and use global auth, let's see an example:
 …
 }}}
 Changing date/time format also supported by lighttpd over environment variable LC_TIME
+Changing date/time format also supported by lighttpd over environment variable LC_TIME:
 {{{
 fastcgi.server = ("/trac" =>
 …
+]
+Relaunch lighttpd, and browse to `http://yourhost.example.org/trac` to access Trac.
+Note about running lighttpd with reduced permissions:
+If nothing else helps and trac.fcgi doesn't start with lighttpd settings `server.username = "www-data"`, `server.groupname = "www-data"`, then in the `bin-environment` section set `PYTHON_EGG_CACHE` to the home directory of `www-data` or some other directory accessible to this account for writing.
+== Simple !LiteSpeed Configuration ==
+Relaunch Lighttpd and browse to `http://yourhost.example.org/trac` to access Trac.
+Note about running Lighttpd with reduced permissions: If nothing else helps and trac.fcgi doesn't start with Lighttpd settings `server.username = "www-data"`, `server.groupname = "www-data"`, then in the `bin-environment` section set `PYTHON_EGG_CACHE` to the home directory of `www-data` or some other directory accessible to this account for writing.
+== Simple !LiteSpeed Configuration
 The FastCGI front-end was developed primarily for use with alternative webservers, such as [http://www.litespeedtech.com/ LiteSpeed].
 …
 !LiteSpeed web server is an event-driven asynchronous Apache replacement designed from the ground-up to be secure, scalable, and operate with minimal resources. !LiteSpeed can operate directly from an Apache config file and is targeted for business-critical environments.
+. Please make sure you have first have a working install of a Trac project. Test install with “tracd” first.
+. Create a Virtual Host for this setup. From now on we will refer to this vhost as !TracVhost. For this tutorial we will be assuming that your trac project will be accessible via:
+. Please make sure you have a working install of a Trac project. Test install with "tracd" first.
+. Create a Virtual Host for this setup. From now on we will refer to this vhost as !TracVhost. For this tutorial we will be assuming that your Trac project will be accessible via:
 {{{
 http://yourdomain.com/trac/
 }}}
+. Go “!TracVhost → External Apps” tab and create a new “External Application”.
+. Go "!TracVhost → External Apps" tab and create a new "External Application".
 {{{
 Name: MyTracFCGI
 …
 }}}
 . Optional. If you need to use htpasswd based authentication. Go to “!TracVhost → Security” tab and create a new security “Realm”.
+. Optional: If you need to use htpasswd based authentication. Go to "!TracVhost → Security" tab and create a new security Realm.
 {{{
 …
 If you don’t have a htpasswd file or don’t know how to create the entries within one, go to http://sherylcanter.com/encrypt.php, to generate the user:password combos.
 . Go to “!PythonVhost → Contexts” and create a new “FCGI Context”.
+. Go to "!PythonVhost → Contexts" and create a new FCGI Context.
 {{{
 …
 }}}
+== Simple Nginx Configuration ==
+== Simple Nginx Configuration
 Nginx is able to communicate with FastCGI processes, but can not spawn them. So you need to start FastCGI server for Trac separately.
 . Nginx configuration with basic authentication handled by Nginx - confirmed to work on 0.6.32
 {{{
+ {{{
     server {
         listen       10.9.8.7:443;
 …
         ssl_prefer_server_ciphers   on;
         # (Or ``^/some/prefix/(.*)``.
         if ($uri ~ ^/(.*)) {
              set $path_info /$1;
+        # it makes sense to serve static resources through Nginx (or ``~ [/some/prefix]/chrome/(.*)``)
+        location ~ /chrome/(.*) {
+             alias /home/trac/instance/static/htdocs/$1;
+        }
+        # it makes sense to serve static resources through Nginx
+        location /chrome/ {
+             alias /home/trac/instance/static/htdocs/;
+        }
+        # You can copy this whole location to ``location [/some/prefix]/login``
+        # You can copy this whole location to ``location [/some/prefix](/login)``
         # and remove the auth entries below if you want Trac to enforce
         # authorization where appropriate instead of needing to authenticate
         # for accessing the whole site.
         # (Or ``location /some/prefix``.)
         location / {
+        # (Or ``~ location /some/prefix(/.*)``.)
+        location ~ (/.*) {
             auth_basic            "trac realm";
             auth_basic_user_file /home/trac/htpasswd;
 …
             # (Or ``fastcgi_param  SCRIPT_NAME  /some/prefix``.)
             fastcgi_param  SCRIPT_NAME        "";
             fastcgi_param  PATH_INFO          $path_info;
+            fastcgi_param  PATH_INFO          $1;
             ## WSGI NEEDED VARIABLES - trac warns about them
 …
+    }
 }}}
+. Modified trac.fcgi:
+{{{
+. Modified trac.fcgi:
+ {{{
 #!/usr/bin/env python
 import os
 …
 }}}
+. reload nginx and launch trac.fcgi like that:
+{{{
+. reload nginx and launch trac.fcgi like that:
+ {{{#!sh
 trac@trac.example ~ $ ./trac-standalone-fcgi.py
 }}}
 The above assumes that:
  * There is a user named 'trac' for running trac instances and keeping trac environments in its home directory.
+ * There is a user named 'trac' for running trac instances and keeping trac environments in its home directory
  * `/home/trac/instance` contains a trac environment
  * `/home/trac/htpasswd` contains authentication information
 …
 Unfortunately nginx does not support variable expansion in fastcgi_pass directive.
 Thus it is not possible to serve multiple trac instances from one server block.
 If you worry enough about security, run trac instances under separate users.
 Another way to run trac as a FCGI external application is offered in ticket #T6224
+Thus it is not possible to serve multiple Trac instances from one server block.
+If you worry enough about security, run Trac instances under separate users.
+Another way to run Trac as a FCGI external application is offered in ticket #T6224
 ----

wiki/pages/TracFineGrainedPermissions

-                      r26484
+                      r37343
+= Fine grained permissions =
 [[PageOutline(2-5, Contents, floated)]]
+= Fine grained permissions =
+Before Trac 0.11, it was only possible to define fine-grained permissions checks on the repository browser sub-system.
+Since 0.11, there's a general mechanism in place that allows custom **permission policy plugins** to grant or deny any action on any kind of Trac resources, even at the level of specific versions of such resources.
+Note that for Trac 0.12, `authz_policy` has been integrated as an optional module (in `tracopt.perm.authz_policy.*`), so it's installed by default and can simply be activated via the //Plugins// panel in the Trac administration module.
+[[TracGuideToc]]
+There is a general mechanism in place that allows custom **permission policy plugins** to grant or deny any action on any kind of Trac resource, even at the level of specific versions of such resources.
+That mechanism is `authz_policy`, which is an optional module in `tracopt.perm.authz_policy.*`, so it is installed by default. It can be activated via the //Plugins// panel in the Trac administration module.
 == Permission Policies ==
 A great diversity of permission policies can be implemented, and Trac comes with a few examples.
+A great diversity of permission policies can be implemented and Trac comes with a few examples.
 Which policies are currently active is determined by a configuration setting in TracIni:
+e.g.
 {{{
 [trac]
 permission_policies = AuthzSourcePolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy
 }}}
 This lists the [#AuthzSourcePolicy] described below as the first policy, followed by the !DefaultPermissionPolicy which checks for the traditional coarse grained style permissions described in TracPermissions, and the !LegacyAttachmentPolicy which knows how to use the coarse grained permissions for checking the permissions available on attachments.
 Among the possible optional choices, there is [#AuthzPolicy], a very generic permission policy, based on an Authz-style system. See
 [trac:source:branches/0.12-stable/tracopt/perm/authz_policy.py authz_policy.py] for details.
+{{{#!ini
+[trac]
+permission_policies = ReadonlyWikiPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy
+}}}
+This lists the [#ReadonlyWikiPolicy] which controls readonly access to wiki pages, followed by the !DefaultPermissionPolicy which checks for the traditional coarse grained style permissions described in TracPermissions, and the !LegacyAttachmentPolicy which knows how to use the coarse grained permissions for checking the permissions available on attachments.
+Among the optional choices, there is [#AuthzPolicy], a very generic permission policy, based on an Authz-style system. See
+[trac:source:branches/1.0-stable/tracopt/perm/authz_policy.py authz_policy.py] for details.
 Another popular permission policy [#AuthzSourcePolicy], re-implements the pre-0.12 support for checking fine-grained permissions limited to Subversion repositories in terms of the new system.
+See also [trac:source:branches/0.12-stable/sample-plugins/permissions sample-plugins/permissions] for more examples.
+See also [trac:source:branches/1.0-stable/sample-plugins/permissions sample-plugins/permissions] for more examples.
 === !AuthzPolicy ===
 ==== Configuration ====
-* Install [http://www.voidspace.org.uk/python/configobj.html ConfigObj] (still needed for 0.12).
-* Copy authz_policy.py into your plugins directory (only for Trac 0.11).
 * Put a [http://swapoff.org/files/authzpolicy.conf authzpolicy.conf] file somewhere, preferably on a secured location on the server, not readable for others than the webuser. If the  file contains non-ASCII characters, the UTF-8 encoding should be used.
 * Update your `trac.ini`:
 . modify the [TracIni#trac-section permission_policies] entry in the `[trac]` section
 {{{
+. modify the [TracIni#trac-section permission_policies] entry in the `[trac]` section:
+{{{#!ini
 [trac]
 ...
 permission_policies = AuthzPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy
 }}}
 . add a new `[authz_policy]` section
 {{{
+permission_policies = AuthzPolicy, ReadonlyWikiPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy
+}}}
+. add a new `[authz_policy]` section:
+{{{#!ini
 [authz_policy]
 authz_file = /some/trac/env/conf/authzpolicy.conf
 }}}
 . enable the plugin through [/admin/general/plugin WebAdmin] or by editing the `[components]` section
 {{{
+. enable the plugin through [/admin/general/plugin WebAdmin] or by editing the `[components]` section:
+{{{#!ini
 [components]
-...
-# Trac 0.12
 tracopt.perm.authz_policy.* = enabled
+# for Trac 0.11 use this
+#authz_policy.* = enabled
+}}}
+}}}
 ==== Usage Notes ====
+Note that the order in which permission policies are specified is quite critical,
 as policies will be examined in the sequence provided.
+Note the order in which permission policies are specified: policies are implemented in the sequence provided and therefore may override earlier policy specifications.
 A policy will return either `True`, `False` or `None` for a given permission check. `True` is returned if the policy explicitly grants the permission. `False` is returned if the policy explicitly denies the permission. `None` is returned if the policy is unable to either grant or deny the permission.
+NOTE: Only if the return value is `None` will the ''next'' permission policy be consulted.
+If none of the policies explicitly grants the permission, the final result will be `False`
+(i.e. permission denied).
+NOTE: Only if the return value is `None` will the ''next'' permission policy be consulted. If none of the policies explicitly grants the permission, the final result will be `False`, i.e. permission denied.
 The `authzpolicy.conf` file is a `.ini` style configuration file:
 {{{
+{{{#!ini
 [wiki:PrivatePage@*]
 john = WIKI_VIEW, !WIKI_MODIFY
 …
 * =
 }}}
+* Each section of the config is a glob pattern used to match against a Trac resource
+  descriptor. These descriptors are in the form:
+* Each section of the config is a glob pattern used to match against a Trac resource descriptor. These descriptors are in the form:
 {{{
 <realm>:<id>@<version>[/<realm>:<id>@<version> ...]
 }}}
+  Resources are ordered left to right, from parent to child. If any
+  component is inapplicable, `*` is substituted. If the version pattern is
+  not specified explicitely, all versions (`@*`) is added implicitly
+  Example: Match the WikiStart page
+{{{
+Resources are ordered left to right, from parent to child. If any component is inapplicable, `*` is substituted. If the version pattern is not specified explicitly, all versions (`@*`) is added implicitly. Example: Match the WikiStart page:
+{{{#!ini
 [wiki:*]
 [wiki:WikiStart*]
 …
 }}}
+  Example: Match the attachment `wiki:WikiStart@117/attachment/FOO.JPG@*`
+  on WikiStart
+{{{
+Example: Match the attachment `wiki:WikiStart@117/attachment:FOO.JPG@*` on WikiStart:
+{{{#!ini
 [wiki:*]
 [wiki:WikiStart*]
 [wiki:WikiStart@*]
+[wiki:WikiStart@*/attachment/*]
+[wiki:WikiStart@117/attachment/FOO.JPG]
+}}}
+* Sections are checked against the current Trac resource descriptor '''IN ORDER''' of
+  appearance in the configuration file. '''ORDER IS CRITICAL'''.
+* Once a section matches, the current username is matched against the keys
+  (usernames) of the section, '''IN ORDER'''.
+[wiki:WikiStart@*/attachment:*]
+[wiki:WikiStart@117/attachment:FOO.JPG]
+}}}
+* Sections are checked against the current Trac resource descriptor '''IN ORDER''' of appearance in the configuration file. '''ORDER IS CRITICAL'''.
+* Once a section matches, the current username is matched against the keys (usernames) of the section, '''IN ORDER'''.
   * If a key (username) is prefixed with a `@`, it is treated as a group.
+  * If a value (permission) is prefixed with a `!`, the permission is
+    denied rather than granted.
+  The username will match any of 'anonymous', 'authenticated', <username> or '*', using normal Trac permission rules. || '''Note:''' Other groups which are created by user (e.g. by 'adding subjects to groups' on web interface page //Admin / Permissions//) cannot be used. See [trac:ticket:5648 #5648] for details about this missing feature ||
+  * If a value (permission) is prefixed with a `!`, the permission is denied rather than granted.
+The username will match any of 'anonymous', 'authenticated', <username> or '*', using normal Trac permission rules. || '''Note:''' Other groups which are created by user (e.g. by 'adding subjects to groups' on web interface page //Admin / Permissions//) cannot be used. See [trac:ticket:5648 #5648] for details about this missing feature. ||
 For example, if the `authz_file` contains:
 {{{
+{{{#!ini
 [wiki:WikiStart@*]
 * = WIKI_VIEW
 …
 Then:
   * All versions of WikiStart will be viewable by everybody (including anonymous)
+  * All versions of WikiStart will be viewable by everybody, including anonymous
   * !PrivatePage will be viewable only by john
   * other pages will be viewable only by john and jack
 Groups:
 {{{
+{{{#!ini
 [groups]
 admins = john, jack
 …
 Some repository examples (Browse Source specific):
 {{{
+{{{#!ini
 # A single repository:
 [repository:test_repo@*]
 john = BROWSER_VIEW, FILE_VIEW
 # John has BROWSER_VIEW and FILE_VIEW for the entire test_repo
+# The default repository (requires Trac 1.0.2 or later):
+[repository:@*]
+john = BROWSER_VIEW, FILE_VIEW
+# John has BROWSER_VIEW and FILE_VIEW for the entire default repository
 # All repositories:
 [repository:*@*]
 jack = BROWSER_VIEW, FILE_VIEW
 # John has BROWSER_VIEW and FILE_VIEW for all repositories
 }}}
 Very fine grain repository access:
 {{{
+# Jack has BROWSER_VIEW and FILE_VIEW for all repositories
+}}}
+Very granular repository access:
+{{{#!ini
 # John has BROWSER_VIEW and FILE_VIEW access to trunk/src/some/location/ only
 [repository:test_repo@*/source:trunk/src/some/location/*@*]
 john = BROWSER_VIEW, FILE_VIEW
 # John has BROWSER_VIEW and FILE_VIEW access to only revision 1 of all files at trunk/src/some/location only
 [repository:test_repo@*/source:trunk/src/some/location/*@1]
 john = BROWSER_VIEW, FILE_VIEW
 # John has BROWSER_VIEW and FILE_VIEW access to all revisions of 'somefile' at trunk/src/some/location only
 [repository:test_repo@*/source:trunk/src/some/location/somefile@*]
 john = BROWSER_VIEW, FILE_VIEW
 # John has BROWSER_VIEW and FILE_VIEW access to only revision 1 of 'somefile' at trunk/src/some/location only
 [repository:test_repo@*/source:trunk/src/some/location/somefile@1]
 …
 Note: In order for Timeline to work/visible for John, we must add CHANGESET_VIEW to the above permission list.
 ==== Missing Features ====
 Although possible with the !DefaultPermissionPolicy handling (see Admin panel), fine-grained permissions still miss those grouping features (see [trac:ticket:9573 #9573], [trac:ticket:5648 #5648]). Patches are partially available, see forgotten authz_policy.2.patch  part of [trac:ticket:6680 #6680]).
+Although possible with the !DefaultPermissionPolicy handling (see Admin panel), fine-grained permissions still miss those grouping features (see [trac:ticket:9573 #9573], [trac:ticket:5648 #5648]). Patches are partially available, see authz_policy.2.patch, part of [trac:ticket:6680 #6680].
 You cannot do the following:
 {{{
+{{{#!ini
 [groups]
 team1 = a, b, c
 …
 }}}
 Permission groups are not supported either. You cannot do the following:
 {{{
+Permission groups are not supported either, so you cannot do the following:
+{{{#!ini
 [groups]
 permission_level_1 = WIKI_VIEW, TICKET_VIEW
 …
 === !AuthzSourcePolicy  (mod_authz_svn-like permission policy) === #AuthzSourcePolicy
 At the time of this writing, the old fine grained permissions system from Trac 0.11 and before used for restricting access to the repository has  been converted to a permission policy component, but from the user point of view, this makes little if no difference.
 That kind of fine-grained permission control needs a definition file, which is the one used by Subversion's mod_authz_svn.
 More information about this file format and about its usage in Subversion is available in the  [http://svnbook.red-bean.com/en/1.5/svn.serverconfig.pathbasedauthz.html Path-Based Authorization] section in the Server Configuration chapter of the svn book.
+At the time of this writing, the old granular permissions system from Trac 0.11 and before used for restricting access to the repository has been converted to a permission policy component. But from the user's point of view, this makes little if any difference.
+That kind of granular permission control needs a definition file, which is the one used by Subversion's mod_authz_svn.
+More information about this file format and about its usage in Subversion is available in the [http://svnbook.red-bean.com/en/1.5/svn.serverconfig.pathbasedauthz.html Path-Based Authorization] section in the Server Configuration chapter of the svn book.
 Example:
 {{{
+{{{#!ini
 [/]
 * = r
 …
 ==== Trac Configuration ====
 To activate fine grained permissions you __must__ specify the {{{authz_file}}} option in the {{{[trac]}}} section of trac.ini. If this option is set to null or not specified the permissions will not be used.
 {{{
 [trac]
+To activate granular permissions you __must__ specify the {{{authz_file}}} option in the `[svn]` section of trac.ini. If this option is set to null or not specified, the permissions will not be used.
+{{{#!ini
+[svn]
 authz_file = /path/to/svnaccessfile
 }}}
 If you want to support the use of the `[`''modulename''`:/`''some''`/`''path''`]` syntax within the `authz_file`, add
 {{{
+If you want to support the use of the `[`''modulename''`:/`''some''`/`''path''`]` syntax within the `authz_file`, add:
+{{{#!ini
 authz_module_name = modulename
 }}}
 where ''modulename'' refers to the same repository indicated by the `repository_dir` entry in the `[trac]` section. As an example, if the `repository_dir` entry in the `[trac]` section is {{{/srv/active/svn/blahblah}}}, that would yield the following:
 {{{
 [trac]
+where ''modulename'' refers to the same repository indicated by the `<name>.dir` entry in the `[repositories]` section. As an example, if the `somemodule.dir` entry in the `[repositories]` section is `/srv/active/svn/somemodule`, that would yield the following:
+{{{ #!ini
+[svn]
 authz_file = /path/to/svnaccessfile
 authz_module_name = blahblah
+authz_module_name = somemodule
 ...
+repository_dir = /srv/active/svn/blahblah
+}}}
+where the svn access file, {{{/path/to/svnaccessfile}}}, contains entries such as {{{[blahblah:/some/path]}}}.
+[repositories]
+somemodule.dir = /srv/active/svn/somemodule
+}}}
+where the svn access file, {{{/path/to/svnaccessfile}}}, contains entries such as {{{[somemodule:/some/path]}}}.
 '''Note:''' Usernames inside the Authz file __must__ be the same as those used inside trac.
 …
 As of version 0.12, make sure you have ''!AuthzSourcePolicy'' included in the permission_policies list in trac.ini, otherwise the authz permissions file will be ignored.
 {{{
 [trac]
 permission_policies = AuthzSourcePolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy
+{{{#!ini
+[trac]
+permission_policies = AuthzSourcePolicy, ReadonlyWikiPolicy, DefaultPermissionPolicy, LegacyAttachmentPolicy
 }}}
 …
 The same access file is typically applied to the corresponding Subversion repository using an Apache directive like this:
 {{{
+{{{#!apache
 <Location /repos>
   DAV svn
 …
 }}}
+For information about how to restrict access to entire projects in a multiple project environment see [trac:wiki:TracMultipleProjectsSVNAccess]
+For information about how to restrict access to entire projects in a multiple project environment see [trac:wiki:TracMultipleProjectsSVNAccess].
+=== ReadonlyWikiPolicy
+Since 1.1.2, the read-only attribute of wiki pages is enabled and enforced when `ReadonlyWikiPolicy` is in the list of active permission policies. The default for new Trac installations in 1.1.2 and later is:
+{{{
+[trac]
+permission_policies = ReadonlyWikiPolicy,
+ DefaultPermissionPolicy,
+ LegacyAttachmentPolicy
+}}}
+When upgrading from earlier versions of Trac, `ReadonlyWikiPolicy` will be appended to the list of `permission_policies` when upgrading the environment, provided that `permission_policies` has the default value. If any non-default `permission_polices` are active, `ReadonlyWikiPolicy` **will need to be manually added** to the list. A message will be echoed to the console when upgrading the environment, indicating if any action needs to be taken.
+**!ReadonlyWikiPolicy must be listed //before// !DefaultPermissionPolicy**. The latter returns `True` to allow modify, delete or rename actions when the user has the respective `WIKI_*` permission, without consideration for the read-only attribute.
+The `ReadonlyWikiPolicy` returns `False` to deny modify, delete and rename actions on wiki pages when the page has the read-only attribute set and the user does not have `WIKI_ADMIN`, regardless of `WIKI_MODIFY`, `WIKI_DELETE` and `WIKI_RENAME` permissions. It returns `None` for all other cases.
+When active, the [#AuthzPolicy] should therefore come before `ReadonlyWikiPolicy`, allowing it to grant or deny the actions on individual resources, which is the usual ordering for `AuthzPolicy` in the `permission_policies` list.
+{{{
+[trac]
+permission_policies = AuthzPolicy,
+ ReadonlyWikiPolicy,
+ DefaultPermissionPolicy,
+ LegacyAttachmentPolicy
+}}}
+The placement of [#AuthzSourcePolicy] relative to `ReadonlyWikiPolicy` does not matter since they don't perform checks on the same realms.
+For all other permission policies, the user will need to decide the proper ordering. Generally, if the permission policy should be capable of overriding the check performed by `ReadonlyWikiPolicy`, it should come before `ReadonlyWikiPolicy` in the list. If the `ReadonlyWikiPolicy` should override the check performed by another permission policy, as is the case for `DefaultPermissionPolicy`, then `ReadonlyWikiPolicy` should come first.
 == Debugging permissions
 In trac.ini set:
 {{{
+{{{#!ini
 [logging]
 log_file = trac.log
 …
 }}}
 And watch:
 {{{
+Display the trac.log to understand what checks are being performed:
+{{{#!sh
 tail -n 0 -f log/trac.log | egrep '\[perm\]|\[authz_policy\]'
 }}}
+to understand what checks are being performed. See the sourced documentation of the plugin for more info.
+See the sourced documentation of the plugin for more info.
 ----

wiki/pages/TracGuide

r26484	r37343
61	61	* TracSupport — How to get more information
62	62
63		If you are looking for a good place to ask a question about Trac, look no further than the [~~http://trac.edgewall.org/wiki/~~MailingList MailingList]. It provides a friendly environment to discuss openly among Trac users and developers.
	63	If you are looking for a good place to ask a question about Trac, look no further than the [trac:MailingList MailingList]. It provides a friendly environment to discuss openly among Trac users and developers.

wiki/pages/TracImport

-                      r26484
+                      r37343
 [[PageOutline]]
+By means of migrating from other issue-tracking systems, perform some external actions over tickets or simply synchronize different data bases, there are some available tools, plug-ins or scripts which lets you import or up-date tickets into Trac.
+Below, follows a collection of some of those.
+To migrate issue tickets from other issue-tracking systems or perform housekeeping actions on tickets or simply synchronize different databases, there are some tools, plug-ins and scripts available, which let you import or update tickets into Trac.
 == !TicketImportPlugin ==
  [http://trac-hacks.org/wiki/TicketImportPlugin TicketImportPlugin] :: mainly, but not only, this plug-in lets you import or up-date into Trac a series of tickets from a '''CSV file''' or (if the [http://pypi.python.org/pypi/xlrd xlrd library] is installed) from an '''Excel file'''.
+[http://trac-hacks.org/wiki/TicketImportPlugin TicketImportPlugin]: this plug-in lets you import or update into Trac a series of tickets from a '''CSV file''' or (if the [http://pypi.python.org/pypi/xlrd xlrd library] is installed) from an '''Excel spreadsheet'''.
 == !ExportImportXlsPlugin ==
+ [http://trac-hacks.org/wiki/ExportImportXlsPlugin ExportImportXlsPlugin] :: this plug-in add an admin panel for export and import tickets via '''XLS file'''.
+  * It depends on the python packages xlwt/rxld.
+[http://trac-hacks.org/wiki/ExportImportXlsPlugin ExportImportXlsPlugin]: this plug-in adds an admin panel for exporting and importing tickets via '''XLS file'''. Requires the python packages xlwt/rxld.
 == Bugzilla ==
+ [http://trac-hacks.org/wiki/BugzillaIssueTrackingPlugin BugzillaIssueTrackingPlugin] :: integrates Bugzilla into Trac keeping TracLinks
+Ticket data can be imported from Bugzilla using the [http://trac.edgewall.org/browser/trunk/contrib/bugzilla2trac.py bugzilla2trac.py] script, available in the contrib/ directory of the Trac distribution.
+[http://trac-hacks.org/wiki/BugzillaIssueTrackingPlugin BugzillaIssueTrackingPlugin]: integrates Bugzilla issue data into Trac keeping TracLinks. Ticket data can be imported from Bugzilla using the [trac:browser:trunk/contrib/bugzilla2trac.py bugzilla2trac.py] script, available in the contrib/ directory of the Trac distribution.
 {{{
 …
 Currently, the following data is imported from Bugzilla:
   * bugs
   * bug activity (field changes)
 …
 The script provides a number of features to ease the conversion, such as:
+  * PRODUCT_KEYWORDS:  Trac doesn't have the concept of products, so the script provides the ability to attach a ticket keyword instead.
+  * IGNORE_COMMENTS:  Don't import Bugzilla comments that match a certain regexp.
+  * STATUS_KEYWORDS:  Attach ticket keywords for the Bugzilla statuses not available in Trac.  By default, the 'VERIFIED' and 'RELEASED' Bugzilla statuses are translated into Trac keywords.
+  * PRODUCT_KEYWORDS: Trac has no concept of products, so the script provides the ability to attach a ticket keyword instead.
+  * IGNORE_COMMENTS: Don't import Bugzilla comments that match a certain regexp.
+  * STATUS_KEYWORDS: Attach ticket keywords for the Bugzilla statuses not available in Trac. By default, the 'VERIFIED' and 'RELEASED' Bugzilla statuses are translated into Trac keywords.
 For more details on the available options, see the configuration section at the top of the script.
+=== Known Issues ===
+{{{
+#!comment
+                   Don't merge this section in the default page
+}}}
+[[TicketQuery(keywords=~bugzilla,status=!closed)]]
+The adequate milestone for valid bugzilla2trac issue is usually ''Not applicable'', which means that fixes to the contributed script are not planned for a particular Trac release, but can happen anytime.
 == Jira ==
  [http://trac-hacks.org/wiki/JiraToTracIntegration JiraToTracIntegration] :: provides tools to import Atlassian Jira backup files into Trac. The plug-in consists of a Python 3.1 commandline tool that:
    - Parses the Jira backup XML file
    - Sends the imported Jira data and attachments to Trac using the [http://trac-hacks.org/wiki/XmlRpcPlugin XmlRpcPlugin]
    - Generates a htpasswd file containing the imported Jira users and their SHA-512 base64 encoded passwords
+[http://trac-hacks.org/wiki/JiraToTracIntegration JiraToTracIntegration]: provides tools to import Atlassian Jira backup files into Trac. The plug-in consists of a Python 3.1 commandline tool that:
+  - Parses the Jira backup XML file.
+  - Sends the imported Jira data and attachments to Trac using the [http://trac-hacks.org/wiki/XmlRpcPlugin XmlRpcPlugin].
+  - Generates a htpasswd file containing the imported Jira users and their SHA-512 base64 encoded passwords.
 == Mantis ==
  [http://trac-hacks.org/wiki/MantisImportScript MantisImportScript] :: script to import from Mantis into Trac the following data:
+[http://trac-hacks.org/wiki/MantisImportScript MantisImportScript]: script to import the following data from Mantis into Trac:
   * bugs
   * bug comments
 …
 == !PlanetForge ==
  [http://trac-hacks.org/wiki/PlanetForgeImportExportPlugin PlanetForgeImportExportPlugin] :: this plugin exports Trac data (wiki, tickets, compoments, permissions, repositories, etc.) using the open format designed by the COCLICO project. It extends the webadmin panel and the 'trac admin ...' command. Still has no 'import' feature.
+[http://trac-hacks.org/wiki/PlanetForgeImportExportPlugin PlanetForgeImportExportPlugin]: this plugin exports Trac data (wiki, tickets, compoments, permissions, repositories, etc.) using the open format designed by the COCLICO project. It extends the webadmin panel and the 'trac admin ...' command. Has no 'import' feature.
 == Scarab ==
+ [http://trac-hacks.org/wiki/ScarabToTracScript ScarabToTracScript] :: script that migrates Scarab issues to Trac tickets
+    * Requires [http://trac-hacks.org/wiki/XmlRpcPlugin XmlRpcPlugin]
+[http://trac-hacks.org/wiki/ScarabToTracScript ScarabToTracScript]: script that migrates Scarab issues to Trac tickets. Requires [http://trac-hacks.org/wiki/XmlRpcPlugin XmlRpcPlugin]
 == Sourceforge ==
+ [http://trac-hacks.org/wiki/SfnToTracScript SfnToTracScript] :: importer of !SourceForge's new backup file (originated from #Trac3521)
+Also, ticket data can be imported from Sourceforge using the [http://trac.edgewall.org/browser/trunk/contrib/sourceforge2trac.py sourceforge2trac.py] script, available in the contrib/ directory of the Trac distribution.
+[http://trac-hacks.org/wiki/SfnToTracScript SfnToTracScript]: importer of !SourceForge's new backup file (originated from #Trac3521).
+Also, ticket data can be imported from Sourceforge using the [trac:browser:trunk/contrib/sourceforge2trac.py sourceforge2trac.py] script, available in the contrib/ directory of the Trac distribution.
 == Other ==
 Since trac uses a SQL database to store the data, you can import from other systems by examining the database tables. Just go into [http://www.sqlite.org/sqlite.html sqlite] command line to look at the tables and import into them from your application.
+Since Trac uses a SQL database to store the data, you can also custom-import from other systems by examining the database tables. Just go into [http://www.sqlite.org/sqlite.html sqlite] command line to look at the tables and import them from your application.
 === Comma delimited file - CSV ===
 See [http://trac.edgewall.org/attachment/wiki/TracSynchronize/csv2trac.2.py csv2trac.2.py] for details.  This approach is particularly useful if one needs to enter a large number of tickets by hand. (note that the ticket type type field, (task etc...) is also needed for this script to work with more recent Trac releases)
 Comments on script: The script has an error on line 168, ('Ticket' needs to be 'ticket').  Also, the listed values for severity and priority are swapped.
+See [trac:attachment:csv2trac.2.py:wiki:TracSynchronize csv2trac.2.py] for details. This approach is particularly useful if you need to enter a large number of tickets by hand. Note that the ticket type type field, (task etc...) is also needed for this script to work with more recent Trac releases.
+Comments on script: The script has an error on line 168: 'Ticket' needs to be 'ticket'. Also, the listed values for severity and priority are swapped.
 ----

wiki/pages/TracIni

-                      r26484
+                      r37343
+= The Trac Configuration File =
+ ''[Note To Editors] Please discuss documentation changes in the [#Discussion] section. Even better, send us [TracDev/SubmittingPatches documentation patches] against the ''code'' (i.e. where the configuration entries are documented), either on Trac-dev or on new tickets. ''
+= The Trac Configuration File
 [[TracGuideToc]]
 [[PageOutline]]
 Trac configuration is done by editing the '''`trac.ini`''' config file, located in `<projectenv>/conf/trac.ini`.  Changes to the configuration are usually reflected immediately, though changes to the `[components]` or `[logging]` sections will require restarting the web server. You may also need to restart the web server after creating a global configuration file when none was previously present.
+Trac is configured by editing the **`trac.ini`** file, located in the `<projectenv>/conf` directory. The `trac.ini` configuration file and its parent directory should be writable by the web server.
 The `trac.ini` configuration file and its parent directory should be writable by the web server, as Trac currently relies on the possibility to trigger a complete environment reload to flush its caches.
+Trac monitors the timestamp of the file to trigger a complete environment reload and flush its caches when the timestamp changes. Most changes to the configuration will be reflected immediately, though changes to the `[components]` or `[logging]` sections will require restarting the web server. You may also need to restart the web server after creating a [#GlobalConfiguration global configuration] file when none was previously present.
 == Global Configuration ==
+== Global Configuration
+In versions prior to 0.11, the global configuration was by default located in `$prefix/share/trac/conf/trac.ini` or /etc/trac/trac.ini, depending on the distribution. If you're upgrading, you may want to specify that file to inherit from.  Literally, when you're upgrading to 0.11, you have to add an `[inherit]` section to your project's `trac.ini` file. Additionally, you have to move your customized templates and common images from `$prefix/share/trac/...` to the new location.
+Global options will be merged with the environment-specific options, where local options override global options. The options file is specified as follows:
+{{{
+Configuration can be shared among environments using one or more global configuration files. Options in the global configuration will be merged with the environment-specific options, with local options overriding global options. The global configuration file is specified as follows:
+{{{#!ini
 [inherit]
 file = /path/to/global/trac.ini
 …
 There are two more entries in the [[#inherit-section| [inherit] ]] section, `templates_dir` for sharing global templates and `plugins_dir`, for sharing plugins. Those entries can themselves be specified in the shared configuration file, and in fact, configuration files can even be chained if you specify another `[inherit] file` there.
 Note that the templates found in the `templates/` directory of the TracEnvironment have precedence over those found in `[inherit] templates_dir`. In turn, the latter have precedence over the installed templates, so be careful about what you put there, notably if you override a default template be sure to refresh your modifications when you upgrade to a new version of Trac (the preferred way to perform TracInterfaceCustomization being still to write a custom plugin doing an appropriate `ITemplateStreamFilter` transformation).
+Note that the templates found in the `templates/` directory of the TracEnvironment have precedence over those found in `[inherit] templates_dir`. In turn, the latter have precedence over the installed templates, so be careful about what you put there. Notably, if you override a default template, refresh your modifications when you upgrade to a new version of Trac. The preferred way to perform TracInterfaceCustomization is still to write a custom plugin doing an appropriate `ITemplateStreamFilter` transformation.
 == Reference for settings
 …
 This is a brief reference of available configuration options, and their default settings.
+Documentation improvements should be discussed on the [trac:MailingList#Trac-dev trac-dev mailing list] or described in a [trac:NewTicket ticket]. Even better, [trac:TracDev/SubmittingPatches submit a patch] against the docstrings in the code.
+{{{ #!comment
+Please don't waste your time by editing the HTML code below, changes won't be picked up. Instead, follow the above guidance for suggesting documentation improvements.
+}}}
 [[TracIni]]

wiki/pages/TracInstall

-                      r26484
+                      r37343
 = Trac Installation Guide for 1.0 =
+= Trac Installation Guide for 1.1
 [[TracGuideToc]]
 Trac is written in the Python programming language and needs a database, [http://sqlite.org/ SQLite], [http://www.postgresql.org/ PostgreSQL], or [http://mysql.com/ MySQL]. For HTML rendering, Trac uses the [http://genshi.edgewall.org Genshi] templating system.
 Since version 0.12, Trac can also be localized, and there's probably a translation available for your language. If you want to be able to use the Trac interface in other languages, then make sure you have installed the optional package [#OtherPythonPackages Babel]. Pay attention to the extra steps for localization support in the [#InstallingTrac Installing Trac] section below. Lacking Babel, you will only get the default english version, as usual.
 If you're interested in contributing new translations for other languages or enhance the existing translations, then please have a look at [[trac:TracL10N]].
 What follows are generic instructions for installing and setting up Trac and its requirements. While you may find instructions for installing Trac on specific systems at [trac:TracInstallPlatforms TracInstallPlatforms] on the main Trac site, please be sure to '''first read through these general instructions''' to get a good understanding of the tasks involved.
+Trac can also be localized, and there is probably a translation available in your language. If you want to use the Trac interface in other languages, then make sure you have installed the optional package [#OtherPythonPackages Babel]. Pay attention to the extra steps for localization support in the [#InstallingTrac Installing Trac] section below. Lacking Babel, you will only get the default English version.
+If you're interested in contributing new translations for other languages or enhancing the existing translations, then please have a look at [trac:wiki:TracL10N TracL10N].
+What follows are generic instructions for installing and setting up Trac. While you may find instructions for installing Trac on specific systems at [trac:TracInstallPlatforms TracInstallPlatforms], please '''first read through these general instructions''' to get a good understanding of the tasks involved.
 [[PageOutline(2-3,Installation Steps,inline)]]
 == Dependencies ==
+== Dependencies
 === Mandatory Dependencies
 To install Trac, the following software packages must be installed:
+ * [http://www.python.org/ Python], version >= 2.5 and < 3.0
+   (note that we dropped the support for Python 2.4 in this release)
+ * [http://peak.telecommunity.com/DevCenter/setuptools setuptools], version >= 0.6, or better yet, [http://pypi.python.org/pypi/distribute distribute]
+ * [http://genshi.edgewall.org/wiki/Download Genshi], version >= 0.6 (unreleased version 0.7dev should work as well)
+You also need a database system and the corresponding python bindings.
+The database can be either SQLite, PostgreSQL or MySQL.
+ * [http://www.python.org/ Python], version >= 2.6 and < 3.0
+   (note that we dropped the support for Python 2.5 in this release)
+ * [http://pypi.python.org/pypi/setuptools setuptools], version >= 0.6
+ * [http://genshi.edgewall.org/wiki/Download Genshi], version >= 0.6
+You also need a database system and the corresponding python bindings. The database can be either SQLite, PostgreSQL or MySQL.
 ==== For the SQLite database #ForSQLite
+As you must be using Python 2.5, 2.6 or 2.7, you already have the SQLite database bindings bundled with the standard distribution of Python (the `sqlite3` module).
+However, if you'd like, you can download the latest and greatest version of [[trac:Pysqlite]] from
+[http://code.google.com/p/pysqlite/downloads/list google code], where you'll find the Windows
+installers or the `tar.gz` archive for building from source:
+{{{
+$ tar xvfz <version>.tar.gz
+$ cd <version>
+$ python setup.py build_static install
+}}}
+This will download the latest SQLite code and build the bindings.
+SQLite 2.x is no longer supported.
+A known bug PySqlite versions 2.5.2-4 prohibits upgrade of trac databases
+from 0.11.x to 0.12. Please use versions 2.5.5 and newer or 2.5.1 and
+older. See #9434 for more detail.
+See additional information in [trac:PySqlite PySqlite].
+As you must be using Python 2.6 or 2.7, you already have the SQLite database bindings bundled with the standard distribution of Python (the `sqlite3` module).
+Optionally, you may install a newer version of [pypi:pysqlite pysqlite] than the one provided by the Python distribution. See [trac:PySqlite#ThePysqlite2bindings PySqlite] for details.
 ==== For the PostgreSQL database #ForPostgreSQL
 …
 You need to install the database and its Python bindings:
  * [http://www.postgresql.org/ PostgreSQL], version 8.0 or later
  * [http://pypi.python.org/pypi/psycopg2 psycopg2]
+ * [http://pypi.python.org/pypi/psycopg2 psycopg2], version 2.0 or later
 See [trac:DatabaseBackend#Postgresql DatabaseBackend] for details.
 ==== For the MySQL database #ForMySQL
 Trac can now work quite well with MySQL, provided you follow the guidelines.
+Trac works well with MySQL, provided you follow the guidelines:
  * [http://mysql.com/ MySQL], version 5.0 or later
  * [http://sf.net/projects/mysql-python MySQLdb], version 1.2.2 or later
 It is '''very''' important to read carefully the  [trac:MySqlDb] page before creating the database.
+Given the caveats and known issues surrounding MySQL, read carefully the [trac:MySqlDb] page before creating the database.
 === Optional Dependencies
+==== Version Control System ====
+===== Subversion =====
+ * [http://subversion.apache.org/ Subversion], 1.5.x or 1.6.x and the '''''corresponding''''' Python bindings. Older versions starting from 1.0, like 1.2.4, 1.3.2 or 1.4.2, etc. should still work. For troubleshooting information, check the [trac:TracSubversion#Troubleshooting TracSubversion] page.
+There are [http://subversion.apache.org/packages.html pre-compiled SWIG bindings] available for various platforms. (Good luck finding precompiled SWIG bindings for any Windows package at that listing. TracSubversion points you to [http://alagazam.net Algazam], which works for me under Python 2.6.)
+Note that Trac '''doesn't''' use [http://pysvn.tigris.org/ PySVN], neither does it work yet with the newer `ctype`-style bindings.
+'''Please note:''' if using Subversion, Trac must be installed on the '''same machine'''. Remote repositories are currently [trac:ticket:493 not supported].
+===== Others =====
+Support for other version control systems is provided via third-parties. See [trac:PluginList] and [trac:VersionControlSystem].
+==== Web Server ====
+A web server is optional because Trac is shipped with a server included, see the [#RunningtheStandaloneServer Running the Standalone Server ] section below.
+Alternatively you configure Trac to run in any of the following environments.
+==== Subversion
+[http://subversion.apache.org/ Subversion], 1.6.x or later and the '''''corresponding''''' Python bindings.
+There are [http://subversion.apache.org/packages.html pre-compiled SWIG bindings] available for various platforms. (Good luck finding precompiled SWIG bindings for any Windows package at that listing. [trac:TracSubversion] points you to [http://alagazam.net Alagazam], which works for me under Python 2.6.)
+For troubleshooting information, see the [trac:TracSubversion#Troubleshooting TracSubversion] page.
+{{{#!div style="border: 1pt dotted; margin: 1em"
+**Note:**
+* Trac '''doesn't''' use [http://pysvn.tigris.org/ PySVN], nor does it work yet with the newer `ctype`-style bindings.
+* If using Subversion, Trac must be installed on the '''same machine'''. Remote repositories are currently [trac:ticket:493 not supported].
+}}}
+==== Git
+[http://git-scm.com/ Git] 1.5.6 or later is supported. More information is available on the [trac:TracGit] page.
+==== Other Version Control Systems
+Support for other version control systems is provided via third-party plugins. See [trac:PluginList#VersionControlSystems] and [trac:VersionControlSystem].
+==== Web Server
+A web server is optional because Trac is shipped with a server included, see the [#RunningtheStandaloneServer Running the Standalone Server] section below.
+Alternatively you can configure Trac to run in any of the following environments:
  * [http://httpd.apache.org/ Apache] with
    - [http://code.google.com/p/modwsgi/ mod_wsgi], see [wiki:TracModWSGI] and
      http://code.google.com/p/modwsgi/wiki/IntegrationWithTrac
    - [http://modpython.org/ mod_python 3.3.1], deprecated: see TracModPython)
+   - [https://github.com/GrahamDumpleton/mod_wsgi mod_wsgi], see [wiki:TracModWSGI] and
+     [http://code.google.com/p/modwsgi/wiki/IntegrationWithTrac ModWSGI IntegrationWithTrac].
+   - [http://modpython.org/ mod_python 3.5.0], see TracModPython
  * a [http://www.fastcgi.com/ FastCGI]-capable web server (see TracFastCgi)
  * an [http://tomcat.apache.org/connectors-doc/ajp/ajpv13a.html AJP]-capable web
    server (see [trac:TracOnWindowsIisAjp TracOnWindowsIisAjp])
+ * Microsoft IIS with FastCGI and a FastCGI-to-WSGI gateway (see [trac:CookBook/Installation/TracOnWindowsIisWfastcgi IIS with FastCGI])
  * a CGI-capable web server (see TracCgi), '''but usage of Trac as a cgi script
    is highly discouraged''', better use one of the previous options.
 ==== Other Python Packages ====
  * [http://babel.edgewall.org Babel], version >= 0.9.5,
    needed for localization support (unreleased version 1.0dev should work as well)
+==== Other Python Packages
+ * [http://babel.edgewall.org Babel], version 0.9.6 or >= 1.3,
+   needed for localization support
  * [http://docutils.sourceforge.net/ docutils], version >= 0.3.9
    for WikiRestructuredText.
+ * [http://pygments.pocoo.org Pygments] for
+   [wiki:TracSyntaxColoring syntax highlighting].
+   [http://silvercity.sourceforge.net/ SilverCity] and/or
+   [http://gnu.org/software/enscript/enscript.html Enscript] may still be used
+   but are deprecated and you really should be using Pygments.
+ * [http://pygments.org Pygments] for
+   [TracSyntaxColoring syntax highlighting].
  * [http://pytz.sf.net pytz] to get a complete list of time zones,
    otherwise Trac will fall back on a shorter list from
    an internal time zone implementation.
+'''Attention''': The various available versions of these dependencies are not necessarily interchangable, so please pay attention to the version numbers above. If you are having trouble getting Trac to work please double-check all the dependencies before asking for help on the [trac:MailingList] or [trac:IrcChannel].
+Please refer to the documentation of these packages to find out how they are best installed. In addition, most of the [trac:TracInstallPlatforms platform-specific instructions] also describe the installation of the dependencies. Keep in mind however that the information there ''probably concern older versions of Trac than the one you're installing'' (there are even some pages that are still talking about Trac 0.8!).
+== Installing Trac ==
+{{{#!div style="border: 1pt dotted; margin: 1em"
+**Attention**: The available versions of these dependencies are not necessarily interchangeable, so please pay attention to the version numbers. If you are having trouble getting Trac to work, please double-check all the dependencies before asking for help on the [trac:MailingList] or [trac:IrcChannel].
+}}}
+Please refer to the documentation of these packages to find out how they are best installed. In addition, most of the [trac:TracInstallPlatforms platform-specific instructions] also describe the installation of the dependencies. Keep in mind however that the information there ''probably concern older versions of Trac than the one you're installing''.
+== Installing Trac
+The [TracAdmin trac-admin] command-line tool, used to create and maintain [TracEnvironment project environments], as well as the [TracStandalone tracd] standalone server are installed along with Trac. There are several methods for installing Trac.
 === Using `easy_install`
+One way to install Trac is using [http://pypi.python.org/pypi/setuptools setuptools].
+With setuptools you can install Trac from the subversion repository;
+Trac can be installed from PyPI or the Subversion repository using [http://pypi.python.org/pypi/setuptools setuptools].
 A few examples:
  - install Trac 1.0:
    {{{
+ - Install Trac 1.0:
+   {{{#!sh
    easy_install Trac==1.0
    }}}
+   (NOT YET ENABLED)
+ - install latest development version 1.0dev:
+   {{{
+ - Install latest development version:
+   {{{#!sh
    easy_install Trac==dev
    }}}
 …
    either use a released version or install from source
+More information can be found on the [trac:setuptools] page.
+{{{#!div style="border: 1pt dotted; margin: 1em"
+**Setuptools Warning:** If the version of your setuptools is in the range 5.4 through 5.6, the environment variable `PKG_RESOURCES_CACHE_ZIP_MANIFESTS` must be set in order to avoid significant performance degradation. More information may be found in the sections on [#RunningtheStandaloneServer Running The Standalone Server] and [#RunningTraconaWebServer Running Trac on a Web Server].
+}}}
 === Using `pip`
 'pip' is an easy_install replacement that is very useful to quickly install python packages.
 To get a trac installation up and running in less than 5 minutes:
+To get a Trac installation up and running in less than 5 minutes:
 Assuming you want to have your entire pip installation in `/opt/user/trac`
+ -
+{{{
 pip -E /opt/user/trac install trac psycopg2
+ {{{#!sh
+pip install trac psycopg2
 }}}
 or
+ -
+{{{
 pip -E /opt/user/trac install trac mysql-python
 }}}
 Make sure your OS specific headers are available for pip to automatically build PostgreSQL (libpq-dev) or MySQL (libmysqlclient-dev) bindings.
 pip will automatically resolve all dependencies (like Genshi, pygments, etc.) and download the latest packages on pypi.python.org and create a self contained installation in `/opt/user/trac`.
+ {{{#!sh
+pip install trac mysql-python
+}}}
+Make sure your OS specific headers are available for pip to automatically build PostgreSQL (`libpq-dev`) or MySQL (`libmysqlclient-dev`) bindings.
+pip will automatically resolve all dependencies (like Genshi, pygments, etc.), download the latest packages from pypi.python.org and create a self contained installation in `/opt/user/trac`.
 All commands (`tracd`, `trac-admin`) are available in `/opt/user/trac/bin`. This can also be leveraged for `mod_python` (using `PythonHandler` directive) and `mod_wsgi` (using `WSGIDaemonProcess` directive)
+Additionally, you can install several trac plugins (listed [http://pypi.python.org/pypi?:action=search&term=trac&submit=search here]) through pip.
+Additionally, you can install several Trac plugins (listed [https://pypi.python.org/pypi?:action=browse&show=all&c=516 here]) through pip.
 === From source
+Of course, using the python-typical setup at the top of the source directory also works.
+You can obtain the source for a .tar.gz or .zip file corresponding to a release (e.g. Trac-1.0.tar.gz), or you can get the source directly from the repository (see Trac:SubversionRepository for details).
+{{{
+Using the python-typical setup at the top of the source directory also works. You can obtain the source for a .tar.gz or .zip file corresponding to a release (e.g. `Trac-1.0.tar.gz`) from the [trac:TracDownload] page, or you can get the source directly from the repository. See [trac:TracRepositories#OfficialSubversionrepository TracRepositories] for details.
+{{{#!sh
 $ python ./setup.py install
 }}}
+''You'll need root permissions or equivalent for this step.''
+This will byte-compile the python source code and install it as an .egg file or folder in the `site-packages` directory
+of your Python installation. The .egg will also contain all other resources needed by standard Trac, such as htdocs and templates.
+The script will also install the [wiki:TracAdmin trac-admin] command-line tool, used to create and maintain [wiki:TracEnvironment project environments], as well as the [wiki:TracStandalone tracd] standalone server.
+If you install from source and want to make Trac available in other languages, make sure  Babel is installed. Only then, perform the `install` (or simply redo the `install` once again afterwards if you realize Babel was not yet installed):
+{{{
+''You will need root permissions or equivalent for this step.''
+This will byte-compile the Python source code and install it as an .egg file or folder in the `site-packages` directory
+of your Python installation. The .egg will also contain all other resources needed by standard Trac, such as `htdocs` and `templates`.
+If you install from source and want to make Trac available in other languages, make sure Babel is installed. Only then, perform the `install` (or simply redo the `install` once again afterwards if you realize Babel was not yet installed):
+{{{#!sh
 $ python ./setup.py install
 }}}
+Alternatively, you can do a `bdist_egg` and copy the .egg from dist/ to the place of your choice, or you can create a Windows installer (`bdist_wininst`).
+=== Advanced Options ===
+Alternatively, you can run `bdist_egg` and copy the .egg from `dist/` to the place of your choice, or you can create a Windows installer (`bdist_wininst`).
+=== Using installer
+On Windows, Trac can be installed using the exe installers available on the [trac:TracDownload] page. Installers are available for the 32-bit and 64-bit versions of Python. Make sure to use the installer that matches the architecture of your Python installation.
+=== Using package manager
+Trac may be available in your platform's package repository. Note however, that the version provided by your package manager may not be the latest release.
+=== Advanced `easy_install` Options
 To install Trac to a custom location, or find out about other advanced installation options, run:
 {{{
+{{{#!sh
 easy_install --help
 }}}
 Also see [http://docs.python.org/inst/inst.html Installing Python Modules] for detailed information.
+Also see [http://docs.python.org/2/install/index.html Installing Python Modules] for detailed information.
 Specifically, you might be interested in:
 {{{
+{{{#!sh
 easy_install --prefix=/path/to/installdir
 }}}
+or, if installing Trac to a Mac OS X system:
+{{{
+easy_install --prefix=/usr/local --install-dir=/Library/Python/2.5/site-packages
+}}}
+Note: If installing on Mac OS X 10.6 running {{{ easy_install http://svn.edgewall.org/repos/trac/trunk }}} will install into {{{ /usr/local }}} and {{{ /Library/Python/2.6/site-packages }}} by default
+The above will place your `tracd` and `trac-admin` commands into `/usr/local/bin` and will install the Trac libraries and dependencies into `/Library/Python/2.5/site-packages`, which is Apple's preferred location for third-party Python application installations.
+== Creating a Project Environment ==
+A [TracEnvironment Trac environment] is the backend storage where Trac stores information like wiki pages, tickets, reports, settings, etc. An environment is basically a directory that contains a human-readable [TracIni configuration file], and various other files and directories.
+A new environment is created using [wiki:TracAdmin trac-admin]:
+{{{
+or, if installing Trac on a Mac OS X system:
+{{{#!sh
+easy_install --prefix=/usr/local --install-dir=/Library/Python/2.6/site-packages
+}}}
+{{{#!div style="border: 1pt dotted; margin: 1em"
+**Mac OS X Note:** On Mac OS X 10.6,  running `easy_install trac` will install into `/usr/local` and `/Library/Python/2.6/site-packages` by default.
+The `tracd` and `trac-admin` commands will be placed in `/usr/local/bin` and will install the Trac libraries and dependencies into `/Library/Python/2.6/site-packages`, which is Apple's preferred location for third-party Python application installations.
+}}}
+== Creating a Project Environment
+A [TracEnvironment Trac environment] is the backend where Trac stores information like wiki pages, tickets, reports, settings, etc. An environment is a directory that contains a human-readable [TracIni configuration file], and other files and directories.
+A new environment is created using [TracAdmin trac-admin]:
+{{{#!sh
 $ trac-admin /path/to/myproject initenv
 }}}
+[TracAdmin trac-admin] will prompt you for the information it needs to create the environment, such as the name of the project and the [TracEnvironment#DatabaseConnectionStrings database connection string]. If you're not sure what to specify for one of these options, just press `<Enter>` to use the default value.
+Using the default database connection string in particular will always work as long as you have SQLite installed.
+For the other [DatabaseBackend database backends] you should plan ahead and already have a database ready to use at this point.
+Since 0.12, Trac doesn't ask for a [TracEnvironment#SourceCodeRepository source code repository] anymore when creating an environment. Repositories can be [TracRepositoryAdmin added] afterward, or the version control support can be disabled completely if you don't need it.
+Also note that the values you specify here can be changed later by directly editing the [TracIni conf/trac.ini] configuration file.
+[TracAdmin trac-admin] will prompt you for the information it needs to create the environment: the name of the project and the [TracEnvironment#DatabaseConnectionStrings database connection string]. If you're not sure what to specify for any of these options, just press `<Enter>` to use the default value.
+Using the default database connection string will always work as long as you have SQLite installed. For the other [trac:DatabaseBackend database backends] you should plan ahead and already have a database ready to use at this point.
+Also note that the values you specify here can be changed later using TracAdmin or directly editing the [TracIni conf/trac.ini] configuration file.
+{{{#!div style="border: 1pt dotted; margin: 1em"
+**Filesystem Warning:** When selecting the location of your environment, make sure that the filesystem on which the environment directory resides supports sub-second timestamps (i.e. **not** `ext2` or `ext3` on Linux, or HFS+ on OSX), as the modification time of the `conf/trac.ini` file will be monitored to decide whether an environment restart is needed or not. A too coarse-grained timestamp resolution may result in inconsistencies in Trac < 1.0.2. The best advice is to opt for a platform with sub-second timestamp resolution, regardless of the Trac version.
+}}}
 Finally, make sure the user account under which the web front-end runs will have '''write permissions''' to the environment directory and all the files inside. This will be the case if you run `trac-admin ... initenv` as this user. If not, you should set the correct user afterwards. For example on Linux, with the web server running as user `apache` and group `apache`, enter:
+{{{
+# chown -R apache.apache /path/to/myproject
+}}}
+{{{#!sh
+$ chown -R apache:apache /path/to/myproject
+}}}
+The actual username and groupname of the apache server may not be exactly `apache`, and are specified in the Apache configuration file by the directives `User` and `Group` (if Apache `httpd` is what you use).
 {{{#!div class=important
 …
 }}}
 == Deploying Trac
 === Running the Standalone Server ===
 After having created a Trac environment, you can easily try the web interface by running the standalone server [wiki:TracStandalone tracd]:
 {{{
+=== Running the Standalone Server
+After having created a Trac environment, you can easily try the web interface by running the standalone server [TracStandalone tracd]:
+{{{#!sh
 $ tracd --port 8000 /path/to/myproject
 }}}
 Then, fire up a browser and visit `http://localhost:8000/`. You should get a simple listing of all environments that `tracd` knows about. Follow the link to the environment you just created, and you should see Trac in action. If you only plan on managing a single project with Trac you can have the standalone server skip the environment list by starting it like this:
 {{{
+{{{#!sh
 $ tracd -s --port 8000 /path/to/myproject
 }}}
+=== Running Trac on a Web Server ===
+{{{#!div style="border: 1pt dotted; margin: 1em"
+**Setuptools Warning:** If the version of your setuptools is in the range 5.4 through 5.6, the environment variable `PKG_RESOURCES_CACHE_ZIP_MANIFESTS` must be set in order to avoid significant performance degradation. The environment variable can be set system-wide, or for just the user that runs the `tracd` process. There are several ways to accomplish this in addition to what is discussed here, and depending on the distribution of your OS.
+To be effective system-wide a shell script with the `export` statement may be added to `/etc/profile.d`. To be effective for a user session the `export` statement may be added to `~/.profile`.
+{{{#!sh
+export PKG_RESOURCES_CACHE_ZIP_MANIFESTS=1
+}}}
+Alternatively, the variable can be set in the shell before executing `tracd`:
+{{{#!sh
+$ PKG_RESOURCES_CACHE_ZIP_MANIFESTS=1 tracd --port 8000 /path/to/myproject
+}}}
+}}}
+=== Running Trac on a Web Server
 Trac provides various options for connecting to a "real" web server:
  - [wiki:TracFastCgi FastCGI]
+ - [TracFastCgi FastCGI]
  - [wiki:TracModWSGI mod_wsgi]
  - //[wiki:TracModPython mod_python] (no longer recommended, as mod_python is not actively maintained anymore)//
  - //[wiki:TracCgi CGI] (should not be used, as the performance is far from optimal)//
+ - [TracModPython mod_python]
+ - //[TracCgi CGI] (should not be used, as the performance is far from optimal)//
 Trac also supports [trac:TracOnWindowsIisAjp AJP] which may be your choice if you want to connect to IIS. Other deployment scenarios are possible: [trac:TracNginxRecipe nginx], [http://projects.unbit.it/uwsgi/wiki/Example#Traconapacheinasub-uri uwsgi], [trac:TracOnWindowsIisIsapi Isapi-wsgi] etc.
 ==== Generating the Trac cgi-bin directory ==== #cgi-bin
 In order for Trac to function properly with FastCGI you need to have a `trac.fcgi` file and for mod_wsgi a `trac.wsgi` file. These are Python scripts which load the appropriate Python code. They can be generated using the `deploy` option of [wiki:TracAdmin trac-admin].
 There is, however, a bit of a chicken-and-egg problem. The [wiki:TracAdmin trac-admin] command requires an existing environment to function, but complains if the deploy directory already exists. This is a problem, because environments are often stored in a subdirectory of the deploy. The solution is to do something like this:
 {{{
+==== Generating the Trac cgi-bin directory #cgi-bin
+In order for Trac to function properly with FastCGI you need to have a `trac.fcgi` file and for mod_wsgi a `trac.wsgi` file. These are Python scripts which load the appropriate Python code. They can be generated using the `deploy` option of [TracAdmin trac-admin].
+There is, however, a bit of a chicken-and-egg problem. The [TracAdmin trac-admin] command requires an existing environment to function, but complains if the deploy directory already exists. This is a problem, because environments are often stored in a subdirectory of the deploy. The solution is to do something like this:
+{{{#!sh
 mkdir -p /usr/share/trac/projects/my-project
 trac-admin /usr/share/trac/projects/my-project initenv
 …
 mv /tmp/deploy/* /usr/share/trac
 }}}
 ==== Mapping Static Resources ====
+Don't forget to check that the web server has the execution right on scripts in the `/usr/share/trac/cgi-bin` directory.
+==== Mapping Static Resources
 Out of the box, Trac will pass static resources such as style sheets or images through itself. For anything but a tracd only based deployment, this is far from optimal as the web server could be set up to directly serve those static resources (for CGI setup, this is '''highly undesirable''' and will cause abysmal performance).
 …
 There are two primary URL paths for static resources - `/chrome/common` and `/chrome/site`. Plugins can add their own resources, usually accessible by `/chrome/<plugin>` path, so its important to override only known paths and not try to make universal `/chrome` alias for everything.
 Note that in order to get those static resources on the filesystem, you need first to extract the relevant resources from Trac using the [TracAdmin trac-admin]` <environment> deploy` command:
+Note that in order to get those static resources on the filesystem, you need first to extract the relevant resources from Trac using the TracAdmin `deploy` command:
 [[TracAdminHelp(deploy)]]
 …
  - `<plugins>/` - one directory for each resource directory managed by the plugins enabled for this environment
 ===== Example: Apache and `ScriptAlias` ===== #ScriptAlias-example
+===== Example: Apache and `ScriptAlias` #ScriptAlias-example
 Assuming the deployment has been done this way:
 {{{
 $ trac-admin /var/trac/env deploy /path/to/trac/htdocs/common
+{{{#!sh
+$ trac-admin /var/trac/env deploy /path/to/shared/trac
 }}}
 Add the following snippet to Apache configuration ''before'' the `ScriptAlias` or `WSGIScriptAlias` (which map all the other requests to the Trac application), changing paths to match your deployment:
 {{{
+{{{#!apache
 Alias /trac/chrome/common /path/to/trac/htdocs/common
 Alias /trac/chrome/site /path/to/trac/htdocs/site
 …
 If using mod_python, you might want to add this too (otherwise, the alias will be ignored):
 {{{
+{{{#!apache
 <Location "/trac/chrome/common/">
   SetHandler None
 …
 }}}
 Note that we mapped `/trac` part of the URL to the `trac.*cgi` script, and the path `/trac/chrome/common` is the path you have to append to that location to intercept requests to the static resources.
+Note that we mapped the `/trac` part of the URL to the `trac.*cgi` script, and the path `/trac/chrome/common` is the path you have to append to that location to intercept requests to the static resources.
 Similarly, if you have static resources in a project's `htdocs` directory (which is referenced by `/trac/chrome/site` URL in themes), you can configure Apache to serve those resources (again, put this ''before'' the `ScriptAlias` or `WSGIScriptAlias` for the .*cgi scripts, and adjust names and locations to match your installation):
 {{{
+{{{#!apache
 Alias /trac/chrome/site /path/to/projectenv/htdocs
 …
 }}}
 Alternatively to aliasing `/trac/chrome/common`, you can tell Trac to generate direct links for those static resources (and only those), using the [[wiki:TracIni#trac-section| [trac] htdocs_location]] configuration setting:
 {{{
+Alternatively to aliasing `/trac/chrome/common`, you can tell Trac to generate direct links for those static resources (and only those), using the [[TracIni#trac-section| [trac] htdocs_location]] configuration setting:
+{{{#!ini
 [trac]
 htdocs_location = http://static.example.org/trac-common/
 …
 Of course, you still need to make the Trac `htdocs/common` directory available through the web server at the specified URL, for example by copying (or linking) the directory into the document root of the web server:
 {{{
+{{{#!sh
 $ ln -s /path/to/trac/htdocs/common /var/www/static.example.org/trac-common
 }}}
+==== Setting up the Plugin Cache ====
+Some Python plugins need to be extracted to a cache directory. By default the cache resides in the home directory of the current user. When running Trac on a Web Server as a dedicated user (which is highly recommended) who has no home directory, this might prevent the plugins from starting. To override the cache location you can set the PYTHON_EGG_CACHE environment variable. Refer to your server documentation for detailed instructions on how to set environment variables.
+== Configuring Authentication ==
+Trac uses HTTP authentication. You'll need to configure your webserver to request authentication when the `.../login` URL is hit (the virtual path of the "login" button). Trac will automatically pick the REMOTE_USER variable up after you provide your credentials. Therefore, all user management goes through your web server configuration. Please consult the documentation of your web server for more info.
+==== Setting up the Plugin Cache
+Some Python plugins need to be extracted to a cache directory. By default the cache resides in the home directory of the current user. When running Trac on a Web Server as a dedicated user (which is highly recommended) who has no home directory, this might prevent the plugins from starting. To override the cache location you can set the `PYTHON_EGG_CACHE` environment variable. Refer to your server documentation for detailed instructions on how to set environment variables.
+== Configuring Authentication
+Trac uses HTTP authentication. You'll need to configure your webserver to request authentication when the `.../login` URL is hit (the virtual path of the "login" button). Trac will automatically pick the `REMOTE_USER` variable up after you provide your credentials. Therefore, all user management goes through your web server configuration. Please consult the documentation of your web server for more info.
 The process of adding, removing, and configuring user accounts for authentication depends on the specific way you run Trac.
 …
 Please refer to one of the following sections:
  * TracStandalone#UsingAuthentication if you use the standalone server, `tracd`.
  * [wiki:TracModWSGI#ConfiguringAuthentication TracModWSGI#ConfiguringAuthentication] if you use the Apache web server, with any of its front end: `mod_wsgi` of course, but the same instructions applies also for `mod_python`, `mod_fcgi` or `mod_fastcgi`.
+ * [wiki:TracModWSGI#ConfiguringAuthentication TracModWSGI#ConfiguringAuthentication] if you use the Apache web server, with any of its front end: `mod_wsgi`, `mod_python`, `mod_fcgi` or `mod_fastcgi`.
  * TracFastCgi if you're using another web server with FCGI support (Cherokee, Lighttpd, !LiteSpeed, nginx)
+[trac:TracAuthenticationIntroduction] also contains some useful information for beginners.
 == Granting admin rights to the admin user
 Grant admin rights to user admin:
 {{{
+{{{#!sh
 $ trac-admin /path/to/myproject permission add admin TRAC_ADMIN
 }}}
+This user will have an "Admin" entry menu that will allow you to admin your trac project.
+== Finishing the install
+=== Automatic reference to the SVN changesets in Trac tickets ===
+You can configure SVN to automatically add a reference to the changeset into the ticket comments, whenever changes are committed to the repository. The description of the commit needs to contain one of the following formulas:
+ * '''`Refs #123`''' - to reference this changeset in `#123` ticket
+ * '''`Fixes #123`''' - to reference this changeset and close `#123` ticket with the default status ''fixed''
+This functionality requires a post-commit hook to be installed as described in [wiki:TracRepositoryAdmin#ExplicitSync TracRepositoryAdmin], and enabling the optional commit updater components by adding the following line to the `[components]` section of your [wiki:TracIni#components-section trac.ini], or enabling the components in the "Plugins" admin panel.
+{{{
+tracopt.ticket.commit_updater.* = enabled
+}}}
+For more information, see the documentation of the `CommitTicketUpdater` component in the "Plugins" admin panel.
+=== Using Trac ===
+This user will have an //Admin// navigation item that directs to pages for administering your Trac project.
+== Configuring Trac
+TracRepositoryAdmin provides information on configuring version control repositories for your project.
+== Using Trac
 Once you have your Trac site up and running, you should be able to create tickets, view the timeline, browse your version control repository if configured, etc.
 Keep in mind that //anonymous// (not logged in) users can by default access only a few of the features, in particular they will have a read-only access to the resources. You will need to configure authentication and grant additional [wiki:TracPermissions permissions] to authenticated users to see the full set of features.
+Keep in mind that //anonymous// (not logged in) users can by default access only a few of the features, in particular they will have a read-only access to the resources. You will need to configure authentication and grant additional [TracPermissions permissions] to authenticated users to see the full set of features.
 '' Enjoy! ''

wiki/pages/TracInterfaceCustomization

-                      r26484
+                      r37343
 = Customizing the Trac Interface =
+= Customizing the Trac Interface
 [[TracGuideToc]]
 [[PageOutline]]
 == Introduction ==
 This page is meant to give users suggestions on how they can customize the look of Trac.  Topics on this page cover editing the HTML templates and CSS files, but not the program code itself.  The topics are intended to show users how they can modify the look of Trac to meet their specific needs.  Suggestions for changes to Trac's interface applicable to all users should be filed as tickets, not listed on this page.
+== Introduction
+This page gives suggestions on how to customize the look of Trac. Topics include editing the HTML templates and CSS files, but not the program code itself. The topics show users how they can modify the look of Trac to meet their specific needs. Suggestions for changes to Trac's interface applicable to all users should be filed as tickets, not listed on this page.
 == Project Logo and Icon ==
 The easiest parts of the Trac interface to customize are the logo and the site icon.  Both of these can be configured with settings in [wiki:TracIni trac.ini].
+== Project Logo and Icon
+The easiest parts of the Trac interface to customize are the logo and the site icon. Both of these can be configured with settings in [wiki:TracIni trac.ini].
 The logo or icon image should be put in a folder named "htdocs" in your project's environment folder.  (''Note: in projects created with a Trac version prior to 0.9 you will need to create this folder'')
+The logo or icon image should be put in a folder named "htdocs" in your project's environment folder. ''Note: in projects created with a Trac version prior to 0.9 you will need to create this folder''.
  ''Note: you can actually put the logo and icon anywhere on your server (as long as it's accessible through the web server), and use their absolute or server-relative URLs in the configuration.''
+ '''Note''': you can actually put the logo and icon anywhere on your server (as long as it's accessible through the web server), and use their absolute or server-relative URLs in the configuration.
 Now configure the appropriate section of your [wiki:TracIni trac.ini]:
 === Logo ===
 Change the `src` setting to `site/` followed by the name of your image file.  The `width` and `height` settings should be modified to match your image's dimensions (the Trac chrome handler uses "`site/`" for files within the project directory `htdocs`, and "`common/`" for the common `htdocs` directory belonging to a Trac installation). Note that 'site/' is not a placeholder for your project name, it is the actual prefix that should be used (literally). For example, if your project is named 'sandbox', and the image file is 'red_logo.gif' then the 'src' setting would be 'site/red_logo.gif', not 'sandbox/red_logo.gif'.
+=== Logo
+Change the `src` setting to `site/` followed by the name of your image file. The `width` and `height` settings should be modified to match your image's dimensions. The Trac chrome handler uses "`site/`" for files within the project directory `htdocs`, and "`common/`" for the common `htdocs` directory belonging to a Trac installation. Note that 'site/' is not a placeholder for your project name, it is the literal prefix that should be used. For example, if your project is named 'sandbox', and the image file is 'red_logo.gif' then the 'src' setting would be 'site/red_logo.gif', not 'sandbox/red_logo.gif'.
 {{{
+{{{#!ini
 [header_logo]
 src = site/my_logo.gif
 …
 }}}
 === Icon ===
 Icons should be a 32x32 image in `.gif` or `.ico` format.  Change the `icon` setting to `site/` followed by the name of your icon file.  Icons will typically be displayed by your web browser next to the site's URL and in the `Bookmarks` menu.
+=== Icon
+Icons are small images displayed by your web browser next to the site's URL and in the `Bookmarks` menu. Icons should be a 32x32 image in `.gif` or `.ico` format. Change the `icon` setting to `site/` followed by the name of your icon file:
 {{{
+{{{#!ini
 [project]
 icon = site/my_icon.ico
 }}}
+Note though that this icon is ignored by Internet Explorer, which only accepts a file named ``favicon.ico`` at the root of the host. To make the project icon work in both IE and other browsers, you can store the icon in the document root of the host, and reference it from ``trac.ini`` as follows:
+== Custom Navigation Entries
+The new [mainnav] and [metanav] can now be used to customize the text and link used for the navigation items, or even to disable them, but not for adding new ones.
+{{{
+[project]
+icon = /favicon.ico
+}}}
+Should your browser have issues with your favicon showing up in the address bar, you may put a "?" (less the quotation marks) after your favicon file extension.
+{{{
+[project]
+icon = /favicon.ico?
+}}}
+== Custom Navigation Entries ==
+The new [mainnav] and [metanav] can now be used to customize the text and link used for the navigation items, or even to disable them (but not for adding new ones).
+In the following example, we rename the link to the Wiki start "Home", and hide the "!Help/Guide". We also make the "View Tickets" entry link to a specific report .
+{{{
+In the following example, we rename the link to the Wiki start "Home", and hide the "!Help/Guide". We also make the "View Tickets" entry link to a specific report:
+{{{#!ini
 [mainnav]
 wiki.label = Home
 …
 == Site Appearance == #SiteAppearance
 Trac is using [http://genshi.edgewall.org Genshi] as the templating engine. Documentation is yet to be written, in the meantime the following tip should work.
+Trac is using [http://genshi.edgewall.org Genshi] as the templating engine. Say you want to add a link to a custom stylesheet, and then your own header and footer. Save the following content as `site.html` inside your projects `templates/` directory (each Trac project can have their own `site.html`), eg `/path/to/env/templates/site.html`:
+Say you want to add a link to a custom stylesheet, and then your own
+header and footer. Save the following content as `site.html` inside your projects `templates/` directory (each Trac project can have their own `site.html`), e.g. {{{/path/to/env/templates/site.html}}}:
+{{{
+#!xml
+{{{#!xml
 <html xmlns="http://www.w3.org/1999/xhtml"
       xmlns:py="http://genshi.edgewall.org/"
 …
   <head py:match="head" py:attrs="select('@*')">
     ${select('*|comment()|text()')}
+    <link rel="stylesheet" type="text/css"
+          href="${href.chrome('site/style.css')}" />
+    <link rel="stylesheet" href="${href.chrome('site/style.css')}" />
   </head>
 …
 }}}
 Those who are familiar with XSLT may notice that Genshi templates bear some similarities. However, there are some Trac specific features - for example `${href.chrome('site/style.css')}` attribute references a CSS file placed into environment's `htdocs/` directory. In a similar fashion `${chrome.htdocs_location}` is used to specify the common `htdocs/` directory belonging to a Trac installation. That latter location can however be overriden using the [[TracIni#trac-config|[trac] htdocs_location]] configuration setting.
+Notice that XSLT bears some similarities with Genshi templates. However, there are some Trac specific features, for example the `${href.chrome('site/style.css')}` attribute references `style.css` in the environment's `htdocs/` directory. In a similar fashion `${chrome.htdocs_location}` is used to specify the common `htdocs/` directory belonging to a Trac installation. That latter location can however be overriden using the [[TracIni#trac-section|[trac] htdocs_location]] configuration setting.
+`site.html` is one file to contain all your modifications. It usually works using the `py:match` directive (element or attribute), and it allows you to modify the page as it renders - the matches hook onto specific sections depending on what it tries to find
+and modify them.
+`site.html` is one file to contain all your modifications. It usually works using the `py:match` directive (element or attribute), and it allows you to modify the page as it renders. The matches hook onto specific sections depending on what it tries to find and modify them.
 See [http://groups.google.com/group/trac-users/browse_thread/thread/70487fb2c406c937/ this thread] for a detailed explanation of the above example `site.html`.
 A `site.html` can contain any number of such `py:match` sections for whatever you need to modify. This is all Genshi, so the [http://genshi.edgewall.org/wiki/Documentation/xml-templates.html docs on the exact syntax] can be found there.
 Example snippet of adding introduction text to the new ticket form (but not shown during preview):
 …
 Example snippets for `style.css` can be found at [trac:wiki:CookBook/SiteStyleCss CookBook/SiteStyleCss].
+If the environment is upgraded from 0.10 and a `site_newticket.cs` file already exists, it can actually be loaded by using a workaround - providing it contains no ClearSilver processing. In addition, as only one element can be imported, the content needs some sort of wrapper such as a `<div>` block or other similar parent container. The XInclude namespace must be specified to allow includes, but that can be moved to document root along with the others:
+{{{
+#!xml
+<form py:match="div[@id='content' and @class='ticket']/form" py:attrs="select('@*')"
+        xmlns:xi="http://www.w3.org/2001/XInclude">
+  <py:if test="req.environ['PATH_INFO'] == '/newticket' and (not 'preview' in req.args)">
+    <xi:include href="site_newticket.cs"><xi:fallback /></xi:include>
+  </py:if>
+  ${select('*')}
+</form>
+}}}
+Also note that the `site.html` (despite its name) can be put in a common templates directory - see the [[TracIni#inherit-section|[inherit] templates_dir]] option. This could provide easier maintainence (and a migration path from 0.10 for larger installations) as one new global `site.html` file can be made to include any existing header, footer and newticket snippets.
+Note that the `site.html`, despite its name, can be put in a shared templates directory, see the [[TracIni#inherit-section|[inherit] templates_dir]] option. This could provide easier maintainence (and a migration path from 0.10 for larger installations) as one new global `site.html` file can be made to include any existing header, footer and newticket snippets.
 == Project List == #ProjectList
 …
 You can use a custom Genshi template to display the list of projects if you are using Trac with multiple projects.
 The following is the basic template used by Trac to display a list of links to the projects.  For projects that could not be loaded it displays an error message. You can use this as a starting point for your own index template.
+The following is the basic template used by Trac to display a list of links to the projects. For projects that could not be loaded, it displays an error message. You can use this as a starting point for your own index template:
+{{{
+#!text/html
+{{{#!text/html
 <!DOCTYPE html
     PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
 …
 For [wiki:TracModWSGI mod_wsgi]:
 {{{
+{{{#!python
 os.environ['TRAC_ENV_INDEX_TEMPLATE'] = '/path/to/template.html'
 }}}
 For [wiki:TracFastCgi FastCGI]:
 {{{
+{{{#!apache
 FastCgiConfig -initial-env TRAC_ENV_PARENT_DIR=/parent/dir/of/projects \
               -initial-env TRAC_ENV_INDEX_TEMPLATE=/path/to/template
 …
 For [wiki:TracModPython mod_python]:
 {{{
+{{{#!apache
 PythonOption TracEnvParentDir /parent/dir/of/projects
 PythonOption TracEnvIndexTemplate /path/to/template
 …
 For [wiki:TracCgi CGI]:
 {{{
+{{{#!apache
 SetEnv TRAC_ENV_INDEX_TEMPLATE /path/to/template
 }}}
 …
 For [wiki:TracStandalone], you'll need to set up the `TRAC_ENV_INDEX_TEMPLATE` environment variable in the shell used to launch tracd:
  - Unix
+   {{{
+#!sh
+   {{{#!sh
 $ export TRAC_ENV_INDEX_TEMPLATE=/path/to/template
    }}}
  - Windows
+   {{{
+#!sh
+   {{{#!sh
 $ set TRAC_ENV_INDEX_TEMPLATE=/path/to/template
    }}}
 == Project Templates ==
+== Project Templates
 The appearance of each individual Trac environment (that is, instance of a project) can be customized independently of other projects, even those hosted by the same server. The recommended way is to use a `site.html` template (see [#SiteAppearance]) whenever possible. Using `site.html` means changes are made to the original templates as they are rendered, and you should not normally need to redo modifications whenever Trac is upgraded. If you do make a copy of `theme.html` or any other Trac template, you need to migrate your modifiations to the newer version - if not, new Trac features or bug fixes may not work as expected.
+The appearance of each individual Trac environment, ie instance of a project, can be customized independently of other projects, even those hosted on the same server. The recommended way is to use a `site.html` template (see [#SiteAppearance]) whenever possible. Using `site.html` means changes are made to the original templates as they are rendered, and you should not normally need to redo modifications whenever Trac is upgraded. If you do make a copy of `theme.html` or any other Trac template, you need to migrate your modifiations to the newer version. If not, new Trac features or bug fixes may not work as expected.
 With that word of caution, any Trac template may be copied and customized. The default Trac templates are located inside the installed Trac egg (`/usr/lib/pythonVERSION/site-packages/Trac-VERSION.egg/trac/templates, .../trac/ticket/templates, .../trac/wiki/templates, ++`). The [#ProjectList] template file is called `index.html`, while the template responsible for main layout is called `theme.html`. Page assets such as images and CSS style sheets are located in the egg's `trac/htdocs` directory.
+With that word of caution, any Trac template may be copied and customized. The default Trac templates are located inside the installed Trac egg (`/usr/lib/pythonVERSION/site-packages/Trac-VERSION.egg/trac/templates, .../trac/ticket/templates, .../trac/wiki/templates, ...`). The [#ProjectList] template file is called `index.html`, while the template responsible for main layout is called `theme.html`. Page assets such as images and CSS style sheets are located in the egg's `trac/htdocs` directory.
 However, do not edit templates or site resources inside the Trac egg - installing Trac again can completely delete your modifications. Instead use one of two alternatives:
+However, do not edit templates or site resources inside the Trac egg. Reinstalling Trac overwrites your modifications. Instead use one of these alternatives:
  * For a modification to one project only, copy the template to project `templates` directory.
  * For a modification shared by several projects, copy the template to a shared location and have each project point to this location using the `[inherit] templates_dir =` trac.ini option.
+ * For a modification shared by several projects, copy the template to a shared location and have each project point to this location using the `[inherit] templates_dir` trac.ini option.
 Trac resolves requests for a template by first looking inside the project, then in any inherited templates location, and finally inside the Trac egg.
 Trac caches templates in memory by default to improve performance. To apply a template you need to restart the server.
+Trac caches templates in memory by default to improve performance. To apply a template you need to restart the web server.
 ----

wiki/pages/TracLinks

-                      r26484
+                      r37343
  Milestones :: `milestone:1.0`
  Attachment :: `attachment:example.tgz` (for current page attachment), `attachment:attachment.1073.diff:ticket:944` (absolute path)
  Changesets :: `r1`, `[1]`, `changeset:1` or (restricted) `[1/trunk]`, `changeset:1/trunk`
+ Changesets :: `r1`, `[1]`, `changeset:1` or (restricted) `[1/trunk]`, `changeset:1/trunk`, `[1/repository]`
  Revision log :: `r1:3`, `[1:3]` or `log:@1:3`, `log:trunk@1:3`, `[2:5/trunk]`
  Diffs :: `diff:@1:3`, `diff:plugins/0.12/mercurial-plugin@9128:9953`,
 …
  Milestones :: milestone:1.0
  Attachment :: attachment:example.tgz (for current page attachment), attachment:attachment.1073.diff:ticket:944 (absolute path)
  Changesets :: r1, [1], changeset:1 or (restricted) [1/trunk], changeset:1/trunk
+ Changesets :: r1, [1], changeset:1 or (restricted) [1/trunk], changeset:1/trunk, [1/repository]
  Revision log :: r1:3, [1:3] or log:@1:3, log:trunk@1:3, [2:5/trunk]
  Diffs :: diff:@1:3, diff:plugins/0.12/mercurial-plugin@9128:9953,
 …
 In order to link explicitly to a [=#toplevel toplevel] Wiki page,
+use the `wiki:/` prefix.
+Be careful **not** to use the `/` prefix alone, as this corresponds to the
+[#Server-relativelinks] syntax and with such a link you will lack the `/wiki/`
+part in the resulting URL.
+''(Changed in 0.11)'' Note that in Trac 0.10, using e.g. `[../newticket]`  may have worked for linking to the `/newticket` top-level URL, but since 0.11, such a link will stay in the wiki namespace and therefore link to a sibling page.
+See [#Server-relativelinks] for the new syntax.
+use the `wiki:/` prefix. Be careful **not** to use the `/` prefix alone, as this corresponds to the [#Server-relativelinks] syntax and with such a link you will lack the `/wiki/` part in the resulting URL. A link such as `[../newticket]` will stay in the wiki namespace and therefore link to a sibling page.
 === Link anchors ===
 …
  - `ticket:1,150`
-''(since Trac 0.11)''
 === timeline: links ===
 Links to the timeline can be created by specifying a date in the ISO:8601 format. The date can be optionally followed by a time specification. The time is interpreted as being UTC time, but alternatively you can specify your local time, followed by your timezone if you don't want to compute the UTC time.
+Links to the timeline can be created by specifying a date in the ISO:8601 format. The date can be optionally followed by a time specification. The time is interpreted as being UTC time, but if you don't want to compute the UTC time, you can specify a local time followed by your timezone offset relative to UTC.
 Examples:
 …
  - `timeline:2008-01-29T15:48Z`
  - `timeline:2008-01-29T16:48+01`
+''(since Trac 0.11)''
+ - `timeline:2008-01-29T16:48+0100`
+ - `timeline:2008-01-29T16:48+01:00`
 === wiki: links ===
 …
  ''aliases:'' `browser:`, `repos:`
 The default behavior for a source:/some/path link is to open the browser in that directory directory
+The default behavior for a `source:/some/path link` is to open the browser in that directory directory
 if the path points to a directory or to show the latest content of the file.
 …
 Finally, one can also highlight an arbitrary set of lines:
  - `source:/some/file@123:10-20,100,103#L99` - highlight lines 10 to 20, and lines 100 and 103.
    ''(since 0.11)''
+ - `source:/some/file@123:10-20,100,103#L99` - highlight lines 10 to 20, and lines 100 and 103, and target line 99
+ - or without version number (the `@` is still needed): `source:/some/file@:10-20,100,103#L99`. Version can be omitted when the path is pointing to a source file that will no longer change (like `source:/tags/...`), otherwise it's better to specify which lines of //which version// of the file you're talking about
 Note that in presence of multiple repositories, the name of the repository is simply integrated in the path you specify for `source:` (e.g. `source:reponame/trunk/README`). ''(since 0.12)''

wiki/pages/TracLogging

-                      r26484
+                      r37343
 = Trac Logging =
+= Trac Logging
 [[TracGuideToc]]
 …
 Logging is configured in the `[logging]` section in [wiki:TracIni#logging-section trac.ini].
 == Supported Logging Methods ==
+== Supported Logging Methods
 The log method is set using the `log_type` option in [wiki:TracIni#logging-section trac.ini], which takes any of the following values:
 …
  '''eventlog''':: (Windows) Use the system's NT Event Log for Trac logging.
 == Log Levels ==
+== Log Levels
 The verbosity level of logged messages can be set using the `log_level` option in [wiki:TracIni#logging-section trac.ini]. The log level defines the minimum level of urgency required for a message to be logged, and those levels are:
 …
  '''DEBUG''':: Trace messages, profiling, etc.
 Note that starting with Trac 0.11.5 you can in addition enable logging of SQL statements, at debug level. This is turned off by default, as it's very verbose (set `[trac] debug_sql = yes` in TracIni to activate).
+Additionally, you can  enable logging of SQL statements at debug level. This is turned off by default, as it's very verbose. Set `[trac] debug_sql = yes` in TracIni to activate.
 == Log Format ==
+== Log Format
 Starting with Trac 0.10.4 (see [trac:#2844 #2844]), it is possible to set the output format for log entries. This can be done through the `log_format` option in [wiki:TracIni#logging-section trac.ini]. The format is a string which can contain any of the [http://docs.python.org/library/logging.html#logrecord-attributes Python logging Formatter variables]. Additonally, the following Trac-specific variables can be used:
+The output format for log entries can be specified through the `log_format` option in [wiki:TracIni#logging-section trac.ini]. The format is a string which can contain any of the [http://docs.python.org/library/logging.html#logrecord-attributes Python logging Formatter variables]. Additonally, the following Trac-specific variables can be used:
  '''$(basename)s''':: The last path component of the current environment.
  '''$(path)s''':: The absolute path for the current environment.
 …
 The default format is:
 {{{
+{{{#!ini
 log_format = Trac[$(module)s] $(levelname)s: $(message)s
 }}}
 In a multi-project environment where all logs are sent to the same place (e.g. `syslog`), it makes sense to add the project name. In this example we use `basename` since that can generally be used to identify a project:
 {{{
+{{{#!ini
 log_format = Trac[$(basename)s:$(module)s] $(levelname)s: $(message)s
 }}}

wiki/pages/TracModPython

-                      r26484
+                      r37343
-= Trac and mod_python =
 [[TracGuideToc]]
+= Trac and mod_python
+Mod_python is an [https://httpd.apache.org/ Apache] module that embeds the Python interpreter within the server, so that web-based applications in Python will run many times faster than traditional CGI and will have the ability to retain database connections.
 Trac supports [http://www.modpython.org/ mod_python], which speeds up Trac's response times considerably, especially compared to [TracCgi CGI], and permits use of many Apache features not possible with [wiki:TracStandalone tracd]/mod_proxy.
+{{{#!div class="important"
+** A Word of Warning **
+As of 16^th^ June 2010, the mod_python project is officially dead.  If you are considering using mod_python for a new installation, '''please don't'''!  There are known issues which will not be fixed and there are now better alternatives.  Check out the main TracInstall pages for your target version for more information.
+}}}
+These instructions are for Apache 2; if you are still using Apache 1.3, you may have some luck with [trac:wiki:TracModPython2.7 TracModPython2.7], but you'll be totally on your own.
+These instructions are for Apache 2. If you are using Apache 1.3, you may have some luck with [trac:wiki:TracModPython2.7 TracModPython2.7], but that is a deprecated setup.
 [[PageOutline(2-3,Overview,inline)]]
 …
 If you just installed mod_python, you may have to add a line to load the module in the Apache configuration:
 {{{
+{{{#!apache
 LoadModule python_module modules/mod_python.so
 }}}
 ''Note: The exact path to the module depends on how the HTTPD installation is laid out.''
 On Debian using apt-get
 {{{
+'''Note''': The exact path to the module depends on how the HTTPD installation is laid out.
+On Debian using apt-get:
+{{{#!sh
 apt-get install libapache2-mod-python libapache2-mod-python-doc
 }}}
+(Still on Debian) after you have installed mod_python, you must enable the modules in apache2 (equivalent of the above Load Module directive):
+{{{
+Still on Debian, after you have installed mod_python, you must enable the modules in apache2, equivalent to the above Load Module directive:
+{{{#!sh
 a2enmod python
 }}}
 On Fedora use, using yum:
 {{{
+{{{#!sh
 yum install mod_python
 }}}
+You can test your mod_python installation by adding the following to your httpd.conf.  You should remove this when you are done testing for security reasons. Note: mod_python.testhandler is only available in mod_python 3.2+.
+{{{
+#!xml
+You can test your mod_python installation by adding the following to your httpd.conf. You should remove this when you are done testing for security reasons. Note: mod_python.testhandler is only available in mod_python 3.2+.
+{{{#!apache
 <Location /mpinfo>
    SetHandler mod_python
 …
 A simple setup of Trac on mod_python looks like this:
+{{{
+#!xml
+{{{#!apache
 <Location /projects/myproject>
    SetHandler mod_python
 …
 }}}
 The option '''`TracUriRoot`''' may or may not be necessary in your setup. Try your configuration without it; if the URLs produced by Trac look wrong, if Trac does not seem to recognize URLs correctly, or you get an odd "No handler matched request to..." error, add the '''`TracUriRoot`''' option.  You will notice that the `Location` and '''`TracUriRoot`''' have the same path.
 The options available are
 {{{
     # For a single project
     PythonOption TracEnv /var/trac/myproject
     # For multiple projects
     PythonOption TracEnvParentDir /var/trac/myprojects
     # For the index of multiple projects
     PythonOption TracEnvIndexTemplate /srv/www/htdocs/trac/project_list_template.html
     # A space delimitted list, with a "," between key and value pairs.
     PythonOption TracTemplateVars key1,val1 key2,val2
     # Useful to get the date in the wanted order
     PythonOption TracLocale en_GB.UTF8
     # See description above
     PythonOption TracUriRoot /projects/myproject
 }}}
 === Python Egg Cache ===
 Compressed python eggs like Genshi are normally extracted into a directory named `.python-eggs` in the users home directory. Since apache's home usually is not writable an alternate egg cache directory can be specified like this:
 {{{
+The option '''`TracUriRoot`''' may or may not be necessary in your setup. Try your configuration without it; if the URLs produced by Trac look wrong, if Trac does not seem to recognize URLs correctly, or you get an odd "No handler matched request to..." error, add the '''`TracUriRoot`''' option. You will notice that the `Location` and '''`TracUriRoot`''' have the same path.
+The options available are:
+{{{#!apache
+# For a single project
+PythonOption TracEnv /var/trac/myproject
+# For multiple projects
+PythonOption TracEnvParentDir /var/trac/myprojects
+# For the index of multiple projects
+PythonOption TracEnvIndexTemplate /srv/www/htdocs/trac/project_list_template.html
+# A space delimitted list, with a "," between key and value pairs.
+PythonOption TracTemplateVars key1,val1 key2,val2
+# Useful to get the date in the wanted order
+PythonOption TracLocale en_GB.UTF8
+# See description above
+PythonOption TracUriRoot /projects/myproject
+}}}
+=== Python Egg Cache
+Compressed Python eggs like Genshi are normally extracted into a directory named `.python-eggs` in the users home directory. Since Apache's home usually is not writeable, an alternate egg cache directory can be specified like this:
+{{{#!apache
 PythonOption PYTHON_EGG_CACHE /var/trac/myprojects/egg-cache
 }}}
 or you can uncompress the Genshi egg to resolve problems extracting from it.
 === Configuring Authentication ===
+Or you can uncompress the Genshi egg to resolve problems extracting from it.
+=== Configuring Authentication
 See corresponding section in the [wiki:TracModWSGI#ConfiguringAuthentication] page.
 == Advanced Configuration
+=== Setting the Python Egg Cache ===
+If the Egg Cache isn't writeable by your Web server, you'll either have to change the permissions, or point Python to a location where Apache can write. This can manifest itself as a ''500 internal server error'' and/or a complaint in the syslog.
+{{{
+#!xml
+=== Setting the Python Egg Cache
+If the Egg Cache isn't writeable by your Web server, you'll either have to change the permissions, or point Python to a location where Apache can write. This can manifest itself as a `500 internal server error` and/or a complaint in the syslog.
+{{{#!apache
 <Location /projects/myproject>
   ...
 …
 }}}
+=== Setting the !PythonPath ===
+If the Trac installation isn't installed in your Python path, you'll have to tell Apache where to find the Trac mod_python handler  using the `PythonPath` directive:
+{{{
+#!xml
+=== Setting the !PythonPath
+If the Trac installation isn't installed in your Python path, you will have to tell Apache where to find the Trac mod_python handler  using the `PythonPath` directive:
+{{{#!apache
 <Location /projects/myproject>
   ...
 …
 Be careful about using the !PythonPath directive, and ''not'' `SetEnv PYTHONPATH`, as the latter won't work.
 === Setting up multiple projects ===
+=== Setting up multiple projects
 The Trac mod_python handler supports a configuration option similar to Subversion's `SvnParentPath`, called `TracEnvParentDir`:
+{{{
+#!xml
+{{{#!apache
 <Location /projects>
   SetHandler mod_python
 …
 If you don't want to have the subdirectory listing as your projects home page you can use a
+{{{
+#!xml
+{{{#!apache
 <LocationMatch "/.+/">
 }}}
 …
 You can also use the same authentication realm for all of the projects using a `<LocationMatch>` directive:
+{{{
+#!xml
+{{{#!apache
 <LocationMatch "/projects/[^/]+/login">
   AuthType Basic
 …
 }}}
+=== Virtual Host Configuration ===
+Below is the sample configuration required to set up your trac as a virtual server (i.e. when you access it at the URLs like
+!http://trac.mycompany.com):
+{{{
+#!xml
+<VirtualHost * >
+=== Virtual Host Configuration
+Below is the sample configuration required to set up your Trac as a virtual server, ie when you access it at the URLs like
+`http://trac.mycompany.com`:
+{{{#!apache
+<VirtualHost *>
     DocumentRoot /var/www/myproject
     ServerName trac.mycompany.com
 …
 This does not seem to work in all cases. What you can do if it does not:
  * Try using `<LocationMatch>` instead of `<Location>`
  * <Location /> may, in your server setup, refer to the complete host instead of simple the root of the server. This means that everything (including the login directory referenced below) will be sent to python and authentication does not work (i.e. you get the infamous Authentication information missing error). If this applies to you, try using a sub-directory for trac instead of the root (i.e. /web/ and /web/login instead of / and /login).
+ * Try using `<LocationMatch>` instead of `<Location>`.
+ * `<Location />` may, in your server setup, refer to the complete host instead of simple the root of the server. This means that everything (including the login directory referenced below) will be sent to Python and authentication does not work, ie you get the infamous Authentication information missing error. If this is the case, try using a sub-directory for Trac instead of the root, ie /web/ and /web/login instead of / and /login.
  * Depending on apache's `NameVirtualHost` configuration, you may need to use `<VirtualHost *:80>` instead of `<VirtualHost *>`.
+For a virtual host that supports multiple projects replace "`TracEnv`" /var/trac/myproject with "`TracEnvParentDir`" /var/trac/
+Note: !DocumentRoot should not point to your Trac project env. As Asmodai wrote on #trac: "suppose there's a webserver bug that allows disclosure of !DocumentRoot they could then leech the entire Trac environment".
+== Troubleshooting ==
+In general, if you get server error pages, you can either check the Apache error log, or enable the `PythonDebug` option:
+{{{
+#!xml
+For a virtual host that supports multiple projects replace `TracEnv /var/trac/myproject` with `TracEnvParentDir /var/trac`.
+'''Note''': !DocumentRoot should not point to your Trac project env. As Asmodai wrote on #trac: "suppose there's a webserver bug that allows disclosure of !DocumentRoot they could then leech the entire Trac environment".
+== Troubleshooting
+If you get server error pages, you can either check the Apache error log, or enable the `PythonDebug` option:
+{{{#!apache
 <Location /projects/myproject>
   ...
 …
 For multiple projects, try restarting the server as well.
+=== Login Not Working ===
+=== Login Not Working
 If you've used `<Location />` directive, it will override any other directives, as well as `<Location /login>`.
 The workaround is to use negation expression as follows (for multi project setups):
+{{{
+#!xml
+{{{#!apache
 #this one for other pages
 <Location ~ "/*(?!login)">
 …
    PythonOption TracEnvParentDir /projects
    PythonOption TracUriRoot /
+</Location>
+</Location>
 #this one for login page
 <Location ~ "/[^/]+/login">
 …
 This problem will most certainly hit you on Unix when using Python 2.4.
+In Python 2.4, some version of Expat (an XML parser library written in C) is used,
+and if Apache is using another version, this results in segmentation faults.
+As Trac 0.11 is using Genshi, which will indirectly use Expat, that problem
+can now hit you even if everything was working fine before with Trac 0.10.
+See Graham Dumpleton's detailed [http://www.dscpl.com.au/wiki/ModPython/Articles/ExpatCausingApacheCrash explanation and workarounds] for the issue.
+=== Form submission problems ===
+In Python 2.4, some version of [http://expat.sourceforge.net/ Expat] (an XML parser library written in C) is used and if Apache is using another version, this results in segmentation faults.
+As Trac 0.11 is using Genshi, which will indirectly use Expat, that problem can now hit you even if everything was working fine before with Trac 0.10. This problem has not been reported for Python 2.5+, so best to upgrade.
+=== Form submission problems
 If you're experiencing problems submitting some of the forms in Trac (a common problem is that you get redirected to the start page after submission), check whether your {{{DocumentRoot}}} contains a folder or file with the same path that you mapped the mod_python handler to. For some reason, mod_python gets confused when it is mapped to a location that also matches a static resource.
 === Problem with virtual host configuration ===
 If the <Location /> directive is used, setting the `DocumentRoot` may result in a ''403 (Forbidden)'' error. Either remove the `DocumentRoot` directive, or make sure that accessing the directory it points is allowed (in a corresponding `<Directory>` block).
 Using <Location /> together with `SetHandler` resulted in having everything handled by mod_python, which leads to not being able download any CSS or images/icons. I used <Location /trac> `SetHandler None` </Location> to circumvent the problem, though I do not know if this is the most elegant solution.
 === Problem with zipped egg ===
 It's possible that your version of mod_python will not import modules from zipped eggs. If you encounter an `ImportError: No module named trac` in your Apache logs but you think everything is where it should be, this might be your problem. Look in your site-packages directory; if the Trac module appears as a ''file'' rather than a ''directory'', then this might be your problem. To rectify, try installing Trac using the `--always-unzip` option, like this:
 {{{
+=== Problem with virtual host configuration
+If the <Location /> directive is used, setting the `DocumentRoot` may result in a ''403 (Forbidden)'' error. Either remove the `DocumentRoot` directive, or make sure that accessing the directory it points is allowed, in a corresponding `<Directory>` block.
+Using <Location /> together with `SetHandler` resulted in having everything handled by mod_python, which leads to not being able to download any CSS or images/icons. Use <Location /trac> `SetHandler None` </Location> to circumvent the problem, though this may not be the most elegant solution.
+=== Problem with zipped egg
+It's possible that your version of mod_python will not import modules from zipped eggs. If you encounter an `ImportError: No module named trac` in your Apache logs but you think everything is where it should be, this might be your problem. Look in your site-packages directory; if the Trac module appears as a ''file'' rather than a ''directory'', then this might be your problem. To rectify this, try installing Trac using the `--always-unzip` option:
+{{{#!sh
 easy_install --always-unzip Trac-0.12b1.zip
 }}}
 === Using .htaccess ===
+=== Using .htaccess
 Although it may seem trivial to rewrite the above configuration as a directory in your document root with a `.htaccess` file, this does not work. Apache will append a "/" to any Trac URLs, which interferes with its correct operation.
 It may be possible to work around this with mod_rewrite, but I failed to get this working. In all, it is more hassle than it is worth. Stick to the provided instructions. :)
 A success story: For me it worked out-of-box, with following trivial config:
 {{{#!xml
+It may be possible to work around this with mod_rewrite, but I failed to get this working. In all, it is more hassle than it is worth.
+This also works out-of-box, with following trivial config:
+{{{#!apache
 SetHandler mod_python
 PythonInterpreter main_interpreter
 …
 }}}
 The `TracUriRoot` is obviously the path you need to enter to the browser to get to the trac (e.g. domain.tld/projects/trac)
 === Additional .htaccess help ===
 If you are using the .htaccess method you may have additional problems if your trac directory is inheriting .htaccess directives from another.  This may also help to add to your .htaccess file:
 {{{
+The `TracUriRoot` is obviously the path you need to enter to the browser to get to Trac, eg `domain.tld/projects/trac`.
+=== Additional .htaccess help
+If you are using the .htaccess method you may have additional problems if your Trac directory is inheriting .htaccess directives from another. This may also help to add to your .htaccess file:
+{{{#!apache
 <IfModule mod_rewrite.c>
   RewriteEngine Off
 …
 === Platform specific issues
+==== Win32 Issues ====
+If you run trac with mod_python < 3.2 on Windows, uploading attachments will '''not''' work. This problem is resolved in mod_python 3.1.4 or later, so please upgrade mod_python to fix this.
+==== OS X issues ====
+When using mod_python on OS X you will not be able to restart Apache using `apachectl restart`. This is apparently fixed in mod_python 3.2, but there's also a patch available for earlier versions [http://www.dscpl.com.au/projects/vampire/patches.html here].
+==== SELinux issues ====
+If Trac reports something like: ''Cannot get shared lock on db.lock''
+The security context on the repository may need to be set:
+{{{
+==== Win32 Issues
+If you run Trac with mod_python < 3.2 on Windows, uploading attachments will '''not''' work. This problem is resolved in mod_python 3.1.4 or later, so please upgrade mod_python to fix this.
+==== OS X issues
+When using mod_python on OS X you will not be able to restart Apache using `apachectl restart`. This is apparently fixed in mod_python 3.2, so please upgrade mod_python to fix this.
+==== SELinux issues
+If Trac reports something like: `Cannot get shared lock on db.lock`, then the security context on the repository may need to be set:
+{{{#!sh
 chcon -R -h -t httpd_sys_content_t PATH_TO_REPOSITORY
 }}}
+See also [http://subversion.tigris.org/faq.html#reposperms]
+==== FreeBSD issues ====
+Pay attention to the version of the installed mod_python and sqlite packages. Ports have both the new and old ones, but earlier versions of pysqlite and mod_python won't integrate as the former requires threaded support in python, and the latter requires a threadless install.
+If you compiled and installed apache2, apache wouldn´t support threads (cause it doesn´t work very well on FreeBSD). You could force thread support when running ./configure for apache, using --enable-threads, but this isn´t recommendable.
+The best option [http://modpython.org/pipermail/mod_python/2006-September/021983.html seems to be] adding to /usr/local/apache2/bin/ennvars the line
+{{{
+See also [http://subversion.apache.org/faq.html#reposperms How do I set repository permissions correctly?]
+==== FreeBSD issues
+The FreeBSD ports have both the new and old versions of mod_python and SQLite, but earlier versions of pysqlite and mod_python won't integrate:
+ * pysqlite requires threaded support in Python
+ * mod_python requires a threadless install.
+Apache2 does not automatically support threads on FreeBSD. You could force thread support when running `./configure` for Apache, using `--enable-threads`, but this isn´t recommended.
+The best option [http://modpython.org/pipermail/mod_python/2006-September/021983.html seems to be] adding to /usr/local/apache2/bin/ennvars the line:
+{{{#!sh
 export LD_PRELOAD=/usr/lib/libc_r.so
 }}}
+==== Fedora 7 Issues ====
+Make sure you install the 'python-sqlite2' package as it seems to be required for TracModPython but not for tracd
+=== Subversion issues ===
+If you get the following Trac Error `Unsupported version control system "svn"` only under mod_python, though it works well on the command-line and even with TracStandalone, chances are that you forgot to add the path to the Python bindings with the [TracModPython#ConfiguringPythonPath PythonPath] directive. (The better way is to add a link to the bindings in the Python `site-packages` directory, or create a `.pth` file in that directory.)
+If this is not the case, it's possible that you're using Subversion libraries that are binary incompatible with the apache ones (an incompatibility of the `apr` libraries is usually the cause). In that case, you also won't be able to use the svn modules for Apache (`mod_dav_svn`).
+You also need a recent version of `mod_python` in order to avoid a runtime error ({{{argument number 2: a 'apr_pool_t *' is expected}}}) due to the default usage of multiple sub-interpreters. 3.2.8 ''should'' work, though it's probably better to use the workaround described in [trac:#3371 #3371], in order to force the use of the main interpreter:
+{{{
+==== Fedora 7 Issues
+Make sure you install the 'python-sqlite2' package as it seems to be required for TracModPython, but not for tracd.
+=== Subversion issues
+If you get the following Trac error `Unsupported version control system "svn"` only under mod_python, though it works well on the command-line and even with TracStandalone, chances are that you forgot to add the path to the Python bindings with the [TracModPython#ConfiguringPythonPath PythonPath] directive. A better way is to add a link to the bindings in the Python `site-packages` directory, or create a `.pth` file in that directory.
+If this is not the case, it's possible that you are using Subversion libraries that are binary incompatible with the Apache ones and an incompatibility of the `apr` libraries is usually the cause. In that case, you also won't be able to use the svn modules for Apache (`mod_dav_svn`).
+You also need a recent version of `mod_python` in order to avoid a runtime error ({{{argument number 2: a 'apr_pool_t *' is expected}}}) due to the default usage of multiple sub-interpreters. Version 3.2.8 ''should'' work, though it's probably better to use the workaround described in [trac:#3371 #3371], in order to force the use of the main interpreter:
+{{{#!apache
 PythonInterpreter main_interpreter
 }}}
+This is anyway the recommended workaround for other well-known issues seen when using the Python bindings for Subversion within mod_python ([trac:#2611 #2611], [trac:#3455 #3455]). See in particular Graham Dumpleton's comment in [trac:comment:9:ticket:3455 #3455] explaining the issue.
+=== Page layout issues ===
+If the formatting of the Trac pages look weird chances are that the style sheets governing the page layout are not handled properly by the web server. Try adding the following lines to your apache configuration:
+{{{
+#!xml
+This is also the recommended workaround for other issues seen when using the Python bindings for Subversion within mod_python ([trac:#2611 #2611], [trac:#3455 #3455]). See in particular Graham Dumpleton's comment in [trac:comment:9:ticket:3455 #3455] explaining the issue.
+=== Page layout issues
+If the formatting of the Trac pages look weird, chances are that the style sheets governing the page layout are not handled properly by the web server. Try adding the following lines to your Apache configuration:
+{{{#!apache
 Alias /myproject/css "/usr/share/trac/htdocs/css"
 <Location /myproject/css>
 …
 }}}
+Note: For the above configuration to have any effect it must be put after the configuration of your project root location, i.e. {{{<Location /myproject />}}}.
+Also, setting `PythonOptimize On` seems to mess up the page headers and footers, in addition to hiding the documentation for macros and plugins (see #Trac8956). Considering how little effect the option has, it is probably a good idea to leave it `Off`.
+=== HTTPS issues ===
+If you want to run Trac fully under https you might find that it tries to redirect to plain http. In this case just add the following line to your apache configuration:
+{{{
+#!xml
+<VirtualHost * >
+'''Note''': For the above configuration to have any effect it must be put after the configuration of your project root location, ie {{{<Location /myproject />}}}.
+Also, setting `PythonOptimize On` seems to mess up the page headers and footers, in addition to hiding the documentation for macros and plugins (see #Trac8956). Considering how little effect the option has, leave it `Off`.
+=== HTTPS issues
+If you want to run Trac fully under https you might find that it tries to redirect to plain http. In this case just add the following line to your Apache configuration:
+{{{#!apache
+<VirtualHost *>
     DocumentRoot /var/www/myproject
     ServerName trac.mycompany.com
 …
 }}}
+=== Segmentation fault with php5-mhash or other php5 modules ===
 You may encounter segfaults (reported on debian etch) if php5-mhash module is installed. Try to remove it to see if this solves the problem. See debian bug report [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=411487]
 Some people also have troubles when using php5 compiled with its own 3rd party libraries instead of system libraries. Check here [http://www.djangoproject.com/documentation/modpython/#if-you-get-a-segmentation-fault]
+=== Segmentation fault with php5-mhash or other php5 modules
+You may encounter segfaults (reported on Debian etch) if php5-mhash module is installed. Try to remove it to see if this solves the problem. See [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=411487 Debian bug report].
+Some people also have troubles when using PHP5 compiled with its own third party libraries instead of system libraries. Check [http://www.djangoproject.com/documentation/modpython/#if-you-get-a-segmentation-fault Django segmentation fault].
 ----
 See also:  TracGuide, TracInstall, [wiki:TracModWSGI ModWSGI], [wiki:TracFastCgi FastCGI],  [trac:TracNginxRecipe TracNginxRecipe]
+See also: TracGuide, TracInstall, [wiki:TracModWSGI ModWSGI], [wiki:TracFastCgi FastCGI], [trac:TracNginxRecipe]

wiki/pages/TracModWSGI

-                      r26484
+                      r37343
+= Trac and mod_wsgi =
+[http://code.google.com/p/modwsgi/ mod_wsgi] is an Apache module for running WSGI-compatible Python applications directly on top of the Apache webserver. The mod_wsgi adapter is written completely in C and provides very good performances.
+= Trac and mod_wsgi
+[https://github.com/GrahamDumpleton/mod_wsgi mod_wsgi] is an Apache module for running WSGI-compatible Python applications directly on top of the Apache webserver. The mod_wsgi adapter is written completely in C and provides very good performance.
 [[PageOutline(2-3,Overview,inline)]]
 …
 == The `trac.wsgi` script
+Trac can be run on top of mod_wsgi with the help of the following application script, which is just a Python file, though usually saved with a `.wsgi` extension).
+Trac can be run on top of mod_wsgi with the help of an application script, which is just a Python file saved with a `.wsgi` extension.
+A robust and generic version of this file can be created using the `trac-admin <env> deploy <dir>` command which automatically substitutes the required paths, see TracInstall#cgi-bin. The script should be sufficient for most installations and users not wanting more information can proceed to [#Mappingrequeststothescript configuring Apache].
+If you are using Trac with multiple projects, you can specify their common parent directory using the `TRAC_ENV_PARENT_DIR` in trac.wsgi:
+{{{#!python
+def application(environ, start_request):
+    # Add this to config when you have multiple projects
+    environ.setdefault('trac.env_parent_dir', '/usr/share/trac/projects')
+    ..
+}}}
 === A very basic script
 …
 }}}
+The `TRAC_ENV` variable should naturally be the directory for your Trac environment (if you have several Trac environments in a directory, you can also use `TRAC_ENV_PARENT_DIR` instead), while the `PYTHON_EGG_CACHE` should be a directory where Python can temporarily extract Python eggs.
+The `TRAC_ENV` variable should naturally be the directory for your Trac environment, and the `PYTHON_EGG_CACHE` should be a directory where Python can temporarily extract Python eggs. If you have several Trac environments in a directory, you can also use `TRAC_ENV_PARENT_DIR` instead of `TRAC_ENV`.
+On Windows:
+ - If run under the user's session, the Python Egg cache can be found in `%AppData%\Roaming`, for example:
+{{{#!python
+os.environ['PYTHON_EGG_CACHE'] = r'C:\Users\Administrator\AppData\Roaming\Python-Eggs'
+}}}
+ - If run under a Window service, you should create a directory for Python Egg cache:
+{{{#!python
+os.environ['PYTHON_EGG_CACHE'] = r'C:\Trac-Python-Eggs'
+}}}
 === A more elaborate script
 If you're using multiple `.wsgi` files (for example one per Trac environment) you must ''not'' use `os.environ['TRAC_ENV']` to set the path to the Trac environment. Using this method may lead to Trac delivering the content of another Trac environment, as the variable may be filled with the path of a previously viewed Trac environment.
+If you are using multiple `.wsgi` files (for example one per Trac environment) you must ''not'' use `os.environ['TRAC_ENV']` to set the path to the Trac environment. Using this method may lead to Trac delivering the content of another Trac environment, as the variable may be filled with the path of a previously viewed Trac environment.
 To solve this problem, use the following `.wsgi` file instead:
 …
 For clarity, you should give this file a `.wsgi` extension. You should probably put the file in its own directory, since you will expose it to Apache.
 If you have installed Trac and eggs in a path different from the standard one you should add that path by adding the following code at the top of the wsgi script:
+If you have installed Trac and Python eggs in a path different from the standard one, you should add that path by adding the following code at the top of the wsgi script:
 {{{#!python
 …
 Change it according to the path you installed the Trac libs at.
-=== Recommended `trac.wsgi` script
-A somewhat robust and generic version of this file can be created using the `trac-admin <env> deploy <dir>` command which automatically substitutes the required paths (see TracInstall#cgi-bin).
 == Mapping requests to the script
 After you've done preparing your .wsgi script, add the following to your Apache configuration file (`httpd.conf` for example).
 {{{
+After preparing your .wsgi script, add the following to your Apache configuration file, typically `httpd.conf`:
+{{{#!apache
 WSGIScriptAlias /trac /usr/local/trac/mysite/apache/mysite.wsgi
 …
 Here, the script is in a subdirectory of the Trac environment.
 If you followed the directions [http://trac.edgewall.org/wiki/TracInstall#cgi-bin Generating the Trac cgi-bin directory], your Apache configuration file should look like following:
 {{{
+If you followed the directions [TracInstall#cgi-bin Generating the Trac cgi-bin directory], your Apache configuration file should look like following:
+{{{#!apache
 WSGIScriptAlias /trac /usr/share/trac/cgi-bin/trac.wsgi
 …
 }}}
 In order to let Apache run the script, access to the directory in which the script resides is opened up to all of Apache. Additionally, the `WSGIApplicationGroup` directive ensures that Trac is always run in the first Python interpreter created by mod_wsgi; this is necessary because the Subversion Python bindings, which are used by Trac, don't always work in other sub-interpreters and may cause requests to hang or cause Apache to crash as a result. After adding this configuration, restart Apache, and then it should work.
+In order to let Apache run the script, access to the directory in which the script resides is opened up to all of Apache. Additionally, the `WSGIApplicationGroup` directive ensures that Trac is always run in the first Python interpreter created by mod_wsgi. This is necessary because the Subversion Python bindings, which are used by Trac, don't always work in other sub-interpreters and may cause requests to hang or cause Apache to crash. After adding this configuration, restart Apache, and then it should work.
 To test the setup of Apache, mod_wsgi and Python itself (ie. without involving Trac and dependencies), this simple wsgi application can be used to make sure that requests gets served (use as only content in your `.wsgi` script):
 …
 For more information about using the mod_wsgi specific directives, see the [http://code.google.com/p/modwsgi/wiki/ mod_wsgi's wiki] and more specifically the [http://code.google.com/p/modwsgi/wiki/IntegrationWithTrac IntegrationWithTrac] page.
 == Configuring Authentication
+We describe in the the following sections different methods for setting up authentication.
+See also [http://httpd.apache.org/docs/2.2/howto/auth.html Authentication, Authorization and Access Control] in the Apache guide.
+=== Using Basic Authentication ===
+The simplest way to enable authentication with Apache is to create a password file. Use the `htpasswd` program to create the password file:
+{{{
+The following sections describe different methods for setting up authentication. See also [http://httpd.apache.org/docs/2.2/howto/auth.html Authentication, Authorization and Access Control] in the Apache guide.
+=== Using Basic Authentication
+The simplest way to enable authentication with Apache is to create a password file. Use the `htpasswd` program as follows:
+{{{#!sh
 $ htpasswd -c /somewhere/trac.htpasswd admin
 New password: <type password>
 …
 }}}
 After the first user, you dont need the "-c" option anymore:
 {{{
+After the first user, you don't need the "-c" option anymore:
+{{{#!sh
 $ htpasswd /somewhere/trac.htpasswd john
 New password: <type password>
 …
 After you've created the users, you can set their permissions using TracPermissions.
 Now, you'll need to enable authentication against the password file in the Apache configuration:
 {{{
+Now, you need to enable authentication against the password file in the Apache configuration:
+{{{#!apache
 <Location "/trac/login">
   AuthType Basic
 …
 }}}
 If you're hosting multiple projects you can use the same password file for all of them:
 {{{
+If you are hosting multiple projects, you can use the same password file for all of them:
+{{{#!apache
 <LocationMatch "/trac/[^/]+/login">
   AuthType Basic
 …
 See also the [http://httpd.apache.org/docs/2.2/mod/mod_auth_basic.html mod_auth_basic] documentation.
 === Using Digest Authentication ===
+=== Using Digest Authentication
 For better security, it is recommended that you either enable SSL or at least use the “digest” authentication scheme instead of “Basic”.
 You'll have to create your `.htpasswd` file with the `htdigest` command instead of `htpasswd`, as follows:
 {{{
 # htdigest -c /somewhere/trac.htpasswd trac admin
+You have to create your `.htpasswd` file with the `htdigest` command instead of `htpasswd`, as follows:
+{{{#!sh
+$ htdigest -c /somewhere/trac.htpasswd trac admin
 }}}
 The "trac" parameter above is the "realm", and will have to be reused in the Apache configuration in the !AuthName directive:
 {{{
+{{{#!apache
 <Location "/trac/login">
+    AuthType Digest
+    AuthName "trac"
+    AuthDigestDomain /trac
+    AuthUserFile /somewhere/trac.htpasswd
+    Require valid-user
+  AuthType Digest
+  AuthName "trac"
+  AuthDigestDomain /trac
+  AuthUserFile /somewhere/trac.htpasswd
+  Require valid-user
 </Location>
 }}}
 …
 For multiple environments, you can use the same `LocationMatch` as described with the previous method.
+'''Note: `Location` cannot be used inside .htaccess files, but must instead live within the main httpd.conf file. If you are on a shared server, you therefore will not be able to provide this level of granularity. '''
 Don't forget to activate the mod_auth_digest. For example, on a Debian 4.0r1 (etch) system:
+{{{
+    LoadModule auth_digest_module /usr/lib/apache2/modules/mod_auth_digest.so
+}}}
+{{{#!apache
+  LoadModule auth_digest_module /usr/lib/apache2/modules/mod_auth_digest.so
+}}}
 See also the [http://httpd.apache.org/docs/2.2/mod/mod_auth_digest.html mod_auth_digest] documentation.
 …
 === Using LDAP Authentication
+Configuration for [http://httpd.apache.org/docs/2.2/mod/mod_ldap.html mod_ldap] authentication in Apache is a bit tricky (httpd 2.2.x and OpenLDAP: slapd 2.3.19)
+. You need to load the following modules in Apache httpd.conf
+{{{
+LoadModule ldap_module modules/mod_ldap.so
+LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
+}}}
+. Your httpd.conf also needs to look something like:
+{{{
+Configuration for [http://httpd.apache.org/docs/2.2/mod/mod_ldap.html mod_ldap] authentication in Apache is more involved (httpd 2.2.x and OpenLDAP: slapd 2.3.19).
+. You need to load the following modules in Apache httpd.conf:
+{{{#!apache
+  LoadModule ldap_module modules/mod_ldap.so
+  LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
+}}}
+. Your httpd.conf also needs to look something like:
+{{{#!apache
 <Location /trac/>
   # (if you're using it, mod_python specific settings go here)
 …
 </Location>
 }}}
+. You can use the LDAP interface as a way to authenticate to a Microsoft Active Directory:
+Use the following as your LDAP URL:
+{{{
+    AuthLDAPURL "ldap://directory.example.com:3268/DC=example,DC=com?sAMAccountName?sub?(objectClass=user)"
+}}}
+You will also need to provide an account for Apache to use when checking
+credentials. As this password will be listed in plaintext in the
+config, you should be sure to use an account specifically for this task:
+{{{
+    AuthLDAPBindDN ldap-auth-user@example.com
+    AuthLDAPBindPassword "password"
+}}}
+The whole section looks like:
+{{{
+. You can use the LDAP interface as a way to authenticate to a Microsoft Active Directory. Use the following as your LDAP URL:
+{{{#!apache
+  AuthLDAPURL "ldap://directory.example.com:3268/DC=example,DC=com?sAMAccountName?sub?(objectClass=user)"
+}}}
+ You will also need to provide an account for Apache to use when checking credentials. As this password will be listed in plaintext in the config, you need to use an account specifically for this task:
+{{{#!apache
+  AuthLDAPBindDN ldap-auth-user@example.com
+  AuthLDAPBindPassword "password"
+}}}
+ The whole section looks like:
+{{{#!apache
 <Location /trac/>
   # (if you're using it, mod_python specific settings go here)
 …
   authzldapauthoritative Off
   # require valid-user
+  require ldap-group CN=Trac Users,CN=Users,DC=company,DC=com
+</Location>
+}}}
+Note 1: This is the case where the LDAP search will get around the multiple OUs, conecting to Global Catalog Server portion of AD (Notice the port is 3268, not the normal LDAP 389). The GCS is basically a "flattened" tree which allows searching for a user without knowing to which OU they belong.
+Note 2: You can also require the user be a member of a certain LDAP group, instead of
+just having a valid login:
+{{{
+    Require ldap-group CN=Trac Users,CN=Users,DC=example,DC=com
+  Require ldap-group CN=Trac Users,CN=Users,DC=company,DC=com
+</Location>
+}}}
+Note 1: This is the case where the LDAP search will get around the multiple OUs, conecting to the Global Catalog Server portion of AD. Note the port is 3268, not the normal LDAP 389. The GCS is basically a "flattened" tree which allows searching for a user without knowing to which OU they belong.
+Note 2: You can also require the user be a member of a certain LDAP group, instead of just having a valid login:
+{{{#!apache
+  Require ldap-group CN=Trac Users,CN=Users,DC=example,DC=com
 }}}
 See also:
+  - [http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html mod_authnz_ldap], documentation for mod_authnz_ldap
+ - [http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html mod_authnz_ldap], documentation for mod_authnz_ldap.
  - [http://httpd.apache.org/docs/2.2/mod/mod_ldap.html mod_ldap], documentation for mod_ldap, which provides connection pooling and a shared cache.
  - [http://trac-hacks.org/wiki/LdapPlugin TracHacks:LdapPlugin] for storing TracPermissions in LDAP.
 …
 === Using SSPI Authentication
+If you are using Apache on Windows, you can use mod_auth_sspi to provide
+single-sign-on. Download the module from the !SourceForge [http://sourceforge.net/projects/mod-auth-sspi/ mod-auth-sspi project] and then add the
+following to your !VirtualHost:
+{{{
+    <Location /trac/login>
+        AuthType SSPI
+        AuthName "Trac Login"
+        SSPIAuth On
+        SSPIAuthoritative On
+        SSPIDomain MyLocalDomain
+        SSPIOfferBasic On
+        SSPIOmitDomain Off
+        SSPIBasicPreferred On
+        Require valid-user
+    </Location>
+}}}
+Using the above, usernames in Trac will be of the form `DOMAIN\username`, so
+you may have to re-add permissions and such. If you do not want the domain to
+be part of the username, set `SSPIOmitDomain On` instead.
+If you are using Apache on Windows, you can use mod_auth_sspi to provide single-sign-on. Download the module from the !SourceForge [http://sourceforge.net/projects/mod-auth-sspi/ mod-auth-sspi project] and then add the following to your !VirtualHost:
+{{{#!apache
+<Location /trac/login>
+  AuthType SSPI
+  AuthName "Trac Login"
+  SSPIAuth On
+  SSPIAuthoritative On
+  SSPIDomain MyLocalDomain
+  SSPIOfferBasic On
+  SSPIOmitDomain Off
+  SSPIBasicPreferred On
+  Require valid-user
+</Location>
+}}}
+Using the above, usernames in Trac will be of the form `DOMAIN\username`, so you may have to re-add permissions and such. If you do not want the domain to be part of the username, set `SSPIOmitDomain On` instead.
 Some common problems with SSPI authentication: [trac:#1055], [trac:#1168] and [trac:#3338].
 …
 Here is an example (from the !HttpAuthStore link) using acct_mgr-0.4 for hosting a single project:
 {{{
+{{{#!ini
 [components]
 ; be sure to enable the component
 …
 }}}
 This will generally be matched with an Apache config like:
 {{{
+{{{#!apache
 <Location /authFile>
    …HTTP authentication configuration…
 …
 </Location>
 }}}
 Note that '''authFile''' need not exist. See the !HttpAuthStore link above for examples where multiple Trac projects are hosted on a server.
+Note that '''authFile''' need not exist (unless you are using Account Manager older than 0.4). See the !HttpAuthStore link above for examples where multiple Trac projects are hosted on a server.
 === Example: Apache/mod_wsgi with Basic Authentication, Trac being at the root of a virtual host
+Per the mod_wsgi documentation linked to above, here is an example Apache configuration that a) serves the Trac instance from a virtualhost subdomain and b) uses Apache basic authentication for Trac authentication.
+Per the mod_wsgi documentation linked to above, here is an example Apache configuration that:
+ - serves the Trac instance from a virtualhost subdomain
+ - uses Apache basic authentication for Trac authentication.
 If you want your Trac to be served from e.g. !http://trac.my-proj.my-site.org, then from the folder e.g. `/home/trac-for-my-proj`, if you used the command `trac-admin the-env initenv` to create a folder `the-env`, and you used `trac-admin the-env deploy the-deploy` to create a folder `the-deploy`, then first:
 Create the htpasswd file:
 {{{
+{{{#!sh
 cd /home/trac-for-my-proj/the-env
 htpasswd -c htpasswd firstuser
 …
 htpasswd htpasswd seconduser
 }}}
+(keep the file above your document root for security reasons)
 Create this file e.g. (ubuntu) `/etc/apache2/sites-enabled/trac.my-proj.my-site.org.conf` with the following contents:
 {{{
+Keep the file above your document root for security reasons.
+Create this file e.g. (ubuntu) `/etc/apache2/sites-enabled/trac.my-proj.my-site.org.conf` with the following content:
+{{{#!apache
 <Directory /home/trac-for-my-proj/the-deploy/cgi-bin/trac.wsgi>
   WSGIApplicationGroup %{GLOBAL}
 …
 Note: for subdomains to work you would probably also need to alter `/etc/hosts` and add A-Records to your host's DNS.
 == Troubleshooting
 === Use a recent version
 Please use either version 1.6, 2.4 or later of `mod_wsgi`. Versions prior to 2.4 in the 2.X branch have problems with some Apache configurations that use WSGI file wrapper extension. This extension is used in Trac to serve up attachments and static media files such as style sheets. If you are affected by this problem attachments will appear to be empty and formatting of HTML pages will appear not to work due to style sheet files not loading properly. Another frequent symptom is that binary attachment downloads are truncated. See mod_wsgi tickets [http://code.google.com/p/modwsgi/issues/detail?id=100 #100] and [http://code.google.com/p/modwsgi/issues/detail?id=132 #132].
+Please use either version 1.6, 2.4 or later of `mod_wsgi`. Versions prior to 2.4 in the 2.X branch have problems with some Apache configurations that use WSGI file wrapper extension. This extension is used in Trac to serve up attachments and static media files such as style sheets. If you are affected by this problem, attachments will appear to be empty and formatting of HTML pages will appear not to work due to style sheet files not loading properly. Another frequent symptom is that binary attachment downloads are truncated. See mod_wsgi tickets [http://code.google.com/p/modwsgi/issues/detail?id=100 #100] and [http://code.google.com/p/modwsgi/issues/detail?id=132 #132].
 ''Note: using mod_wsgi 2.5 and Python 2.6.1 gave an Internal Server Error on my system (Apache 2.2.11 and Trac 0.11.2.1). Upgrading to Python 2.6.2 (as suggested [http://www.mail-archive.com/modwsgi@googlegroups.com/msg01917.html here]) solved this for me[[BR]]-- Graham Shanks''
+If you plan to use `mod_wsgi` in embedded mode on Windows or with the MPM worker on Linux, then you'll even need version 0.3.4 or greater (see [trac:#10675] for details).
+=== Getting Trac to work nicely with SSPI and 'Require Group' ===
+If like me you've set Trac up on Apache, Win32 and configured SSPI, but added a 'Require group' option to your apache configuration, then the SSPIOmitDomain option is probably not working.  If its not working your usernames in trac are probably looking like 'DOMAIN\user' rather than 'user'.
+This WSGI script 'fixes' things, hope it helps:
+If you plan to use `mod_wsgi` in embedded mode on Windows or with the MPM worker on Linux, then you will need version 3.4 or greater. See [trac:#10675] for details.
+=== Getting Trac to work nicely with SSPI and 'Require Group'
+If you have set Trac up on Apache, Win32 and configured SSPI, but added a 'Require group' option to your apache configuration, then the SSPIOmitDomain option is probably not working. If it is not working, your usernames in Trac probably look like 'DOMAIN\user' rather than 'user'.
+This WSGI script 'fixes' that:
 {{{#!python
 import os
 …
 }}}
+=== Trac with PostgreSQL ===
+When using the mod_wsgi adapter with multiple Trac instances and PostgreSQL (or MySQL?) as a database back-end, the server ''may'' create a lot of open database connections and thus PostgreSQL processes.
+A somewhat brutal workaround is to disabled connection pooling in Trac. This is done by setting `poolable = False` in `trac.db.postgres_backend` on the `PostgreSQLConnection` class.
+But it's not necessary to edit the source of Trac, the following lines in `trac.wsgi` will also work:
+{{{
+=== Trac with PostgreSQL
+When using the mod_wsgi adapter with multiple Trac instances and PostgreSQL (or MySQL?) as the database, the server ''may'' create a lot of open database connections and thus PostgreSQL processes.
+A somewhat brutal workaround is to disable connection pooling in Trac. This is done by setting `poolable = False` in `trac.db.postgres_backend` on the `PostgreSQLConnection` class.
+But it is not necessary to edit the source of Trac. The following lines in `trac.wsgi` will also work:
+{{{#!python
 import trac.db.postgres_backend
 trac.db.postgres_backend.PostgreSQLConnection.poolable = False
 …
 or
 {{{
+{{{#!python
 import trac.db.mysql_backend
 trac.db.mysql_backend.MySQLConnection.poolable = False
 }}}
 Now Trac drops the connection after serving a page and the connection count on the database will be kept minimal.
+Now Trac drops the connection after serving a page and the connection count on the database will be kept low.
 //This is not a recommended approach though. See also the notes at the bottom of the [http://code.google.com/p/modwsgi/wiki/IntegrationWithTrac mod_wsgi's IntegrationWithTrac] wiki page.//
 …
 For more troubleshooting tips, see also the [TracModPython#Troubleshooting mod_python troubleshooting] section, as most Apache-related issues are quite similar, plus discussion of potential [http://code.google.com/p/modwsgi/wiki/ApplicationIssues application issues] when using mod_wsgi. The wsgi page also has a [http://code.google.com/p/modwsgi/wiki/IntegrationWithTrac Integration With Trac] document.
 ----
 See also:  TracGuide, TracInstall, [wiki:TracFastCgi FastCGI], [wiki:TracModPython ModPython], [trac:TracNginxRecipe TracNginxRecipe]
+See also: TracGuide, TracInstall, [wiki:TracFastCgi FastCGI], [wiki:TracModPython ModPython], [trac:TracNginxRecipe TracNginxRecipe]

wiki/pages/TracNavigation

-                      r26484
+                      r37343
 = Trac Navigation =
+= Trac Navigation
+Starting with Trac 0.11, it is now possible to customize the main and meta navigation entries in some basic ways.
+The new `[mainnav]` and `[metanav]` configuration sections can now be used to customize the text and link used for the navigation items, or even to disable them.  The `mainnav` and `metanav` options in the `[trac]` configuration section can also be used to change the order.
+The main and meta navigation entries can be customized in some basic ways. The `[mainnav]` and `[metanav]` configuration sections can be used to customize the navigation item text and link, change the ordering of the navigation items, or even disable them.
 === `[mainnav]` #mainnav-bar
 …
 ** [=#Example Example] **
+In the following example, we rename the link to the Wiki start "Home", and make the "View Tickets" entry link to a specific report.  The second example (below) also hides the "!Help/Guide" link.
+Relevant excerpt from the TracIni:
+{{{
+In the following example we rename the link to WikiStart //Home//, and make the //View Tickets// entry link to a specific report.
+{{{#!ini
 [mainnav]
 wiki.label = Home
 …
 === `[metanav]` #metanav-bar
 `[metanav]` corresponds to the '''meta navigation bar''', by default positioned above the main navigation bar and below the ''Search'' box. It contains the ''Log in'', ''Logout'', ''!Help/Guide'' etc. entries. This navigation bar is meant to access some global information about the Trac project and the current user.
+`[metanav]` corresponds to the '''meta navigation bar''', by default positioned above the main navigation bar and below the ''Search'' box. It contains the ''Login'', ''Logout'', ''!Help/Guide'' etc. entries. This navigation bar is meant to access some global information about the Trac project and the current user.
 There is one special entry in the  `[metanav]` section: `logout.redirect` is the page the user sees after hitting the logout button.
+There is one special entry in the  `[metanav]` section: `logout.redirect` is the page the user sees after hitting the logout button.  The ''!Help/Guide'' link is also hidden in the following example.
 [[comment(see also #Trac3808)]]
 ** Example **
 {{{
+{{{#!ini
 [metanav]
 help = disabled
 …
 === Notes
 Possible URL formats (for `.href` or `.redirect`):
+=== URL Formats
+Possible URL formats for `.href` or `.redirect`:
 || '''config''' || '''redirect to''' ||
 || `wiki/Logout` || `/projects/env/wiki/Logout` ||
 …
 === `[trac]` #nav-order
 The `mainnav` and `metanav` options in the `[trac]` configuration section control the order in which the navigation items are displayed (left to right).  This can be useful with plugins that add navigation items.
+=== Ordering #nav-order
+The `order` attribute specifies the order in which the navigation items are displayed. This can be particularly useful for plugins that add navigation items.
+** Example **
+Non-negative floating point values may be used for the `order` attribute. The navigation items will be arranged from left to right in increasing order. Navigation items without an `order` attribute are sorted alphabetically by name.
+In the following example, we change the order to prioritise the ticket related items further left.
+The default values are:
+{{{#!ini
+[mainnav]
+browser.order = 4
+newticket.order = 6
+roadmap.order = 3
+search.order = 7
+tickets.order = 5
+timeline.order = 2
+wiki.order = 1
+Relevant excerpt from the TracIni:
+{{{
+[trac]
+mainnav = wiki,tickets,newticket,timeline,roadmap,browser,search,admin
+[metanav]
+about.order = 5
+help.order = 4
+login.order = 1
+logout.order = 2
+prefs.order = 3
 }}}
-The default order and item names can be viewed in the [TracIni#trac-section trac section of TracIni].
 === Context Navigation #ctxtnav-bar
+Note that it is still not possible to customize the '''contextual navigation bar''', i.e. the one usually placed below the main navigation bar.
+Note that it is still not possible to customize the '''contextual navigation bar''', ie the one usually placed below the main navigation bar.
 ----

wiki/pages/TracNotification

-                      r26484
+                      r37343
 = Email Notification of Ticket Changes =
+= Email Notification of Ticket Changes
 [[TracGuideToc]]
 …
 Disabled by default, notification can be activated and configured in [wiki:TracIni trac.ini].
+== Receiving Notification Mails ==
+When reporting a new ticket or adding a comment, enter a valid email address or your username in the ''reporter'', ''assigned to/owner'' or ''cc'' field. Trac will automatically send you an email when changes are made to the ticket (depending on how notification is configured).
+This is useful to keep up-to-date on an issue or enhancement request that interests you.
+=== How to use your username to receive notification mails ===
+To receive notification mails, you can either enter a full email address or your username. To get notified with a simple username or login, you need to specify a valid email address in the ''Preferences'' page.
+Alternatively, a default domain name ('''`smtp_default_domain`''') can be set in the TracIni file (see [#ConfigurationOptions Configuration Options] below). In this case, the default domain will be appended to the username, which can be useful for an "Intranet" kind of installation.
+== Receiving Notification Mails
+When reporting a new ticket or adding a comment, enter a valid email address or your Trac username in the ''reporter'', ''assigned to/owner'' or ''cc'' field. Trac will automatically send you an email when changes are made to the ticket, depending on how notification is configured.
+=== How to use your username to receive notification mails
+To receive notification mails, you can either enter a full email address or your Trac username. To get notified with a simple username or login, you need to specify a valid email address in the ''Preferences'' page.
+Alternatively, a default domain name ('''`smtp_default_domain`''') can be set in the TracIni file, see [#ConfigurationOptions Configuration Options] below. In this case, the default domain will be appended to the username, which can be useful for an "Intranet" kind of installation.
 When using apache and mod_kerb for authentication against Kerberos / Active Directory, usernames take the form ('''`username@EXAMPLE.LOCAL`'''). To avoid this being interpreted as an email address, add the Kerberos domain to  ('''`ignore_domains`''').
+== Configuring SMTP Notification ==
+=== Ticket attachment notifications
+Since 1.0.3 Trac will send notifications when a ticket attachment is added or deleted. Usually attachment notifications will be enabled in an environment by default. To disable the attachment notifications for an environment the `TicketAttachmentNotifier` component must be disabled:
+{{{#!ini
+[components]
+trac.ticket.notification.TicketAttachmentNotifier = disabled
+}}}
+== Configuring SMTP Notification
 '''Important:''' For TracNotification to work correctly, the `[trac] base_url` option must be set in [wiki:TracIni trac.ini].
+=== Configuration Options ===
+These are the available options for the `[notification]` section in trac.ini.
+ * '''`smtp_enabled`''': Enable email notification.
+ * '''`smtp_from`''': Email address to use for ''Sender''-headers in notification emails.
+ * '''`smtp_from_name`''': Sender name to use for ''Sender''-headers in notification emails.
+ * '''`smtp_from_author`''': (''since 1.0'') Use the author of a change (the reporter of a new ticket, or the author of a comment) as the `From:` header value in notification e-mails (default: false). If the author hasn't set an e-mail address, `smtp_from` and `smtp_from_name` are used instead.
+ * '''`smtp_replyto`''': Email address to use for ''Reply-To''-headers in notification emails.
+ * '''`smtp_default_domain`''': (''since 0.10'') Append the specified domain to addresses that do not contain one. Fully qualified addresses are not modified. The default domain is appended to all username/login for which an email address cannot be found from the user settings.
+ * '''`smtp_always_cc`''': List of email addresses to always send notifications to. ''Typically used to post ticket changes to a dedicated mailing list.''
+ * '''`smtp_always_bcc`''': (''since 0.10'') List of email addresses to always send notifications to, but keeps addresses not visible from other recipients of the notification email
+ * '''`smtp_subject_prefix`''': (''since 0.10.1'') Text that is inserted before the subject of the email. Set to "!__default!__" by default.
+ * '''`always_notify_reporter`''':  Always send notifications to any address in the reporter field (default: false).
+ * '''`always_notify_owner`''': (''since 0.9'') Always send notifications to the address in the owner field (default: false).
+ * '''`always_notify_updater`''': (''since 0.10'') Always send a notification to the updater of a ticket (default: true).
+ * '''`use_public_cc`''': (''since 0.10'') Addresses in To: (owner, reporter) and Cc: lists are visible by all recipients (default is ''Bcc:'' - hidden copy).
+ * '''`use_short_addr`''': (''since 0.10'') Enable delivery of notifications to addresses that do not contain a domain (i.e. do not end with ''@<domain.com>'').This option is useful for intranets, where the SMTP server can handle local addresses and map the username/login to a local mailbox. See also `smtp_default_domain`. Do not use this option with a public SMTP server.
+ * '''`ignore_domains`''': Comma-separated list of domains that should not be considered part of email addresses (for usernames with Kerberos domains).
+ * '''`mime_encoding`''': (''since 0.10'') This option allows selecting the MIME encoding scheme. Supported values:
+   * `none`: default value, uses 7bit encoding if the text is plain ASCII, or 8bit otherwise.
+   * `base64`: works with any kind of content. May cause some issues with touchy anti-spam/anti-virus engines.
+   * `qp` or `quoted-printable`: best for european languages (more compact than base64) if 8bit encoding cannot be used.
+ * '''`ticket_subject_template`''': (''since 0.11'') A [http://genshi.edgewall.org/wiki/Documentation/text-templates.html Genshi text template] snippet used to get the notification subject.
+ * '''`email_sender`''': (''since 0.12'') Name of the component implementing `IEmailSender`. This component is used by the notification system to send emails. Trac currently provides the following components:
+   * `SmtpEmailSender`: connects to an SMTP server (default).
+   * `SendmailEmailSender`: runs a `sendmail`-compatible executable.
+Either '''`smtp_from`''' or '''`smtp_replyto`''' (or both) ''must'' be set, otherwise Trac refuses to send notification mails.
+The following options are specific to email delivery through SMTP.
+ * '''`smtp_server`''': SMTP server used for notification messages.
+ * '''`smtp_port`''': (''since 0.9'') Port used to contact the SMTP server.
+ * '''`smtp_user`''': (''since 0.9'') User name for authentication SMTP account.
+ * '''`smtp_password`''': (''since 0.9'') Password for authentication SMTP account.
+ * '''`use_tls`''': (''since 0.10'') Toggle to send notifications via a SMTP server using [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS], such as GMail.
+The following option is specific to email delivery through a `sendmail`-compatible executable.
+ * '''`sendmail_path`''': (''since 0.12'') Path to the sendmail executable. The sendmail program must accept the `-i` and `-f` options.
+=== Example Configuration (SMTP) ===
+{{{
+=== Configuration Options
+These are the available options for the `[notification]` section in trac.ini:
+[[TracIni(notification)]]
+=== Example Configuration (SMTP)
+{{{#!ini
 [notification]
 smtp_enabled = true
 …
 }}}
 === Example Configuration (`sendmail`) ===
 {{{
+=== Example Configuration (`sendmail`)
+{{{#!ini
 [notification]
 smtp_enabled = true
 …
 }}}
+=== Customizing the e-mail subject ===
+=== Subscriber Configuration
+The default subscriptions are configured in the `[notification-subscriber]` section in trac.ini:
+[[TracIni(notification-subscriber)]]
+Each user can override these defaults in his ''Notifications'' preferences.
+For example to unsubscribe from notifications for one's own changes and comments, the rule "Never notify: I update a ticket" should be added above other subscription rules.
+=== Customizing the e-mail subject
 The e-mail subject can be customized with the `ticket_subject_template` option, which contains a [http://genshi.edgewall.org/wiki/Documentation/text-templates.html Genshi text template] snippet. The default value is:
 {{{
+{{{#!genshi
 $prefix #$ticket.id: $summary
 }}}
 …
  * `prefix`: The prefix defined in `smtp_subject_prefix`.
  * `summary`: The ticket summary, with the old value if the summary was edited.
  * `ticket`: The ticket model object (see [trac:source:/trunk/trac/ticket/model.py model.py]). Individual ticket fields can be addressed by appending the field name separated by a dot, e.g. `$ticket.milestone`.
 === Customizing the e-mail content ===
 The notification e-mail content is generated based on `ticket_notify_email.txt` in `trac/templates`.  You can add your own version of this template by adding a `ticket_notify_email.txt` to the templates directory of your environment. The default looks like this:
 {{{
+ * `ticket`: The ticket model object (see [trac:source:/trunk/trac/ticket/model.py model.py]). Individual ticket fields can be addressed by appending the field name separated by a dot, eg `$ticket.milestone`.
+=== Customizing the e-mail content
+The notification e-mail content is generated based on `ticket_notify_email.txt` in `trac/ticket/templates`. You can add your own version of this template by adding a `ticket_notify_email.txt` to the templates directory of your environment. The default looks like this:
+{{{#!genshi
 $ticket_body_hdr
 $ticket_props
 …
 $project.descr
 }}}
+== Sample Email ==
+== Sample Email
 {{{
 #42: testing
 …
 ---------------------------+------------------------------------------------
 Changes:
   * component:  changset view => search system
+  * component:  changeset view => search system
   * priority:  low => highest
   * owner:  jonas => anonymous
 …
 }}}
+== Customizing e-mail content for MS Outlook ==
+Out-of-the-box, MS Outlook normally presents plain text e-mails with a variable-width font; the ticket properties table will most certainly look like a mess in MS Outlook. This can be fixed with some customization of the [#Customizingthee-mailcontent e-mail template].
+== Customizing e-mail content for MS Outlook
+MS Outlook normally presents plain text e-mails with a variable-width font, and as a result the ticket properties table will most certainly look like a mess in MS Outlook. This can be fixed with some customization of the [#Customizingthee-mailcontent e-mail template].
 Replace the following second row in the template:
 …
 }}}
 with this instead (''requires Python 2.6 or later''):
+with this (requires Python 2.6 or later):
 {{{
 --------------------------------------------------------------------------
 …
 }}}
 The table of ticket properties is replaced with a list of a selection of the properties. A tab character separates the name and value in such a way that most people should find this more pleasing than the default table, when using MS Outlook.
+The table of ticket properties is replaced with a list of a selection of the properties. A tab character separates the name and value in such a way that most people should find this more pleasing than the default table when using MS Outlook.
 {{{#!div style="margin: 1em 1.75em; border:1px dotted"
 {{{#!html
 …
 Changes:<br />
 <br />
 &nbsp;&nbsp;* component: &nbsp;changset view =&gt; search system<br />
+&nbsp;&nbsp;* component: &nbsp;changeset view =&gt; search system<br />
 &nbsp;&nbsp;* priority: &nbsp;low =&gt; highest<br />
 &nbsp;&nbsp;* owner: &nbsp;jonas =&gt; anonymous<br />
 …
 }}}
 **Important**: Only those ticket fields that are listed in `sel` are part of the HTML mail. If you have defined custom ticket fields which shall be part of the mail they have to be added to `sel`, example:
+**Important**: Only those ticket fields that are listed in `sel` are part of the HTML mail. If you have defined custom ticket fields which are to be part of the mail, then they have to be added to `sel`. Example:
 {{{
    sel = ['Reporter', ..., 'Keywords', 'Custom1', 'Custom2']
 }}}
+However, it's not as perfect as an automatically HTML-formatted e-mail would be, but presented ticket properties are at least readable by default in MS Outlook...
+== Using GMail as the SMTP relay host ==
+Use the following configuration snippet
+{{{
+However, the solution is still a workaround to an automatically HTML-formatted e-mail.
+== Using GMail as the SMTP relay host
+Use the following configuration snippet:
+{{{#!ini
 [notification]
 smtp_enabled = true
 …
 }}}
 where ''user'' and ''password'' match an existing GMail account, ''i.e.'' the ones you use to log in on [http://gmail.com]
+where ''user'' and ''password'' match an existing GMail account, ie the ones you use to log in on [http://gmail.com].
 Alternatively, you can use `smtp_port = 25`.[[br]]
+You should not use `smtp_port = 465`. It will not work and your ticket submission may deadlock. Port 465 is reserved for the SMTPS protocol, which is not supported by Trac. See [comment:ticket:7107:2 #7107] for details.
+== Filtering notifications for one's own changes ==
+In Gmail, use the filter:
+{{{
+from:(<smtp_from>) (("Reporter: <username>" -Changes) OR "Changes (by <username>)")
+}}}
+For Trac .10, use the filter:
+{{{
+from:(<smtp_from>) (("Reporter: <username>" -Changes -Comment) OR "Changes (by <username>)" OR "Comment (by <username>)")
+}}}
+to delete these notifications.
+In Thunderbird, there is no such solution if you use IMAP
+(see http://kb.mozillazine.org/Filters_(Thunderbird)#Filtering_the_message_body).
+The best you can do is to set "always_notify_updater" in conf/trac.ini to false.
+You will however still get an email if you comment a ticket that you own or have reported.
+You can also add this plugin:
+http://trac-hacks.org/wiki/NeverNotifyUpdaterPlugin
+== Troubleshooting ==
+You should not use `smtp_port = 465`. Doing so may deadlock your ticket submission. Port 465 is reserved for the SMTPS protocol, which is not supported by Trac. See [trac:comment:2:ticket:7107 #7107] for details.
+== Troubleshooting
 If you cannot get the notification working, first make sure the log is activated and have a look at the log to find if an error message has been logged. See TracLogging for help about the log feature.
 Notification errors are not reported through the web interface, so the user who submit a change or a new ticket never gets notified about a notification failure. The Trac administrator needs to look at the log to find the error trace.
 === ''Permission denied'' error ===
+Notification errors are not reported through the web interface, so the user who submits a change or a new ticket never gets notified about a notification failure. The Trac administrator needs to look at the log to find the error trace.
+=== ''Permission denied'' error
 Typical error message:
 {{{
+{{{#!sh
   ...
   File ".../smtplib.py", line 303, in connect
 …
 }}}
 This error usually comes from a security settings on the server: many Linux distributions do not let the web server (Apache, ...) to post email message to the local SMTP server.
+This error usually comes from a security settings on the server: many Linux distributions do not allow the web server (Apache, ...) to post email messages to the local SMTP server.
 Many users get confused when their manual attempts to contact the SMTP server succeed:
 {{{
+{{{#!sh
 telnet localhost 25
 }}}
 The trouble is that a regular user may connect to the SMTP server, but the web server cannot:
 {{{
+This is because a regular user may connect to the SMTP server, but the web server cannot:
+{{{#!sh
 sudo -u www-data telnet localhost 25
 }}}
 In such a case, you need to configure your server so that the web server is authorized to post to the SMTP server. The actual settings depend on your Linux distribution and current security policy. You may find help browsing the Trac [trac:MailingList MailingList] archive.
+In such a case, you need to configure your server so that the web server is authorized to post to the SMTP server. The actual settings depend on your Linux distribution and current security policy. You may find help in the Trac [trac:MailingList MailingList] archive.
 Relevant ML threads:
 …
 For SELinux in Fedora 10:
 {{{
+{{{#!sh
 $ setsebool -P httpd_can_sendmail 1
 }}}
+=== ''Suspected spam'' error ===
+=== ''Suspected spam'' error
 Some SMTP servers may reject the notification email sent by Trac.
+The default Trac configuration uses Base64 encoding to send emails to the recipients. The whole body of the email is encoded, which sometimes trigger ''false positive'' SPAM detection on sensitive email servers. In such an event, it is recommended to change the default encoding to "quoted-printable" using the `mime_encoding` option.
+Quoted printable encoding works better with languages that use one of the Latin charsets. For Asian charsets, it is recommended to stick with the Base64 encoding.
+=== ''501, 5.5.4 Invalid Address'' error ===
+On IIS 6.0 you could get a
+{{{
+Failure sending notification on change to ticket #1: SMTPHeloError: (501, '5.5.4 Invalid Address')
+}}}
+in the trac log. Have a look [http://support.microsoft.com/kb/291828 here] for instructions on resolving it.
+The default Trac configuration uses Base64 encoding to send emails to the recipients. The whole body of the email is encoded, which sometimes trigger ''false positive'' spam detection on sensitive email servers. In such an event, change the default encoding to "quoted-printable" using the `mime_encoding` option.
+Quoted printable encoding works better with languages that use one of the Latin charsets. For Asian charsets, stick with the Base64 encoding.
 ----
 See also: TracTickets, TracIni, TracGuide
+See also: TracTickets, TracIni, TracGuide, [trac:TracDev/NotificationApi]

wiki/pages/TracPermissions

-                      r26484
+                      r37343
 = Trac Permissions =
+= Trac Permissions
 [[TracGuideToc]]
 Trac uses a simple, case sensitive, permission system to control what users can and can't access.
 Permission privileges are managed using the [TracAdmin trac-admin] tool or (new in version 0.11) the ''General / Permissions'' panel in the ''Admin'' tab of the web interface.
+Permission privileges are managed using the [TracAdmin trac-admin] tool or the ''General / Permissions'' panel in the ''Admin'' tab of the web interface.
 In addition to the default permission policy described in this page, it is possible to activate additional permission policies by enabling plugins and listing them in the `[trac] permission_policies` configuration entry in the TracIni. See TracFineGrainedPermissions for more details.
 …
 In addition to these privileges, users can be granted additional individual rights in effect when authenticated and logged into the system. All logged in users belong to the virtual group "authenticated", which inherits permissions from "anonymous".
+== Graphical Admin Tab ==
+''This feature is new in version 0.11.''
+To access this tab, a user must have one of the following permissions: `TRAC_ADMIN`, `PERMISSION_ADMIN`, `PERMISSION_ADD`, `PERMISSION_REMOVE`. The permissions can granted using the `trac-admin` command (more on `trac-admin` below):
+== Graphical Admin Tab
+To access this tab, a user must have one of the following permissions: `TRAC_ADMIN`, `PERMISSION_ADMIN`, `PERMISSION_GRANT`, `PERMISSION_REVOKE`. The permissions can be granted using the `trac-admin` command (more on `trac-admin` below):
 {{{
   $ trac-admin /path/to/projenv permission add bob TRAC_ADMIN
 …
 An easy way to quickly secure a new Trac install is to run the above command on the anonymous user, install the [http://trac-hacks.org/wiki/AccountManagerPlugin AccountManagerPlugin], create a new admin account graphically and then remove the TRAC_ADMIN permission from the anonymous user.
+== Available Privileges ==
+From the graphical admin tab, users with `PERMISSION_GRANT` will only be allowed to grant permissions that they possess, and users with `PERMISSION_REVOKE` will only be allowed to revoke permissions that they possess. For example, a user cannot grant `MILESTONE_ADMIN` unless they have `PERMISSION_GRANT` and `MILESTONE_ADMIN`, and they cannot revoke `MILESTONE_ADMIN` unless they have `PERMISSION_REVOKE` and `MILESTONE_ADMIN`. `PERMISSION_ADMIN` just grants the user both `PERMISSION_GRANT` and `PERMISSION_REVOKE`, and users with `TRAC_ADMIN` can grant or revoke any permission.
+== Available Privileges
 To enable all privileges for a user, use the `TRAC_ADMIN` permission. Having `TRAC_ADMIN` is like being `root` on a *NIX system: it will allow you to perform any operation.
 …
 Otherwise, individual privileges can be assigned to users for the various different functional areas of Trac ('''note that the privilege names are case-sensitive'''):
 === Repository Browser ===
+=== Repository Browser
 || `BROWSER_VIEW` || View directory listings in the [wiki:TracBrowser repository browser] ||
 …
 || `CHANGESET_VIEW` || View [wiki:TracChangeset repository check-ins] ||
 === Ticket System ===
+=== Ticket System
 || `TICKET_VIEW` || View existing [wiki:TracTickets tickets] and perform [wiki:TracQuery ticket queries] ||
 …
 || `TICKET_EDIT_CC` || Full modify cc field ||
 || `TICKET_EDIT_DESCRIPTION` || Modify description field ||
 || `TICKET_EDIT_COMMENT` || Modify comments ||
+|| `TICKET_EDIT_COMMENT` || Modify another user's comments. Any user can modify their own comments by default. ||
 || `TICKET_BATCH_MODIFY` || [wiki:TracBatchModify Batch modify] tickets ||
 || `TICKET_ADMIN` || All `TICKET_*` permissions, plus the deletion of ticket attachments and modification of the reporter and description fields. It also allows managing ticket properties in the WebAdmin panel. ||
+|| `TICKET_ADMIN` || All `TICKET_*` permissions, deletion of ticket attachments and modification of the reporter field, which grants ability to create a ticket on behalf of another user (it will appear that another user created the ticket). It also allows managing ticket properties through the web administration module. ||
 Attention: the "view tickets" button appears with the `REPORT_VIEW` permission.
 === Roadmap ===
+=== Roadmap
 || `MILESTONE_VIEW` || View milestones and assign tickets to milestones. ||
 …
 || `ROADMAP_ADMIN` || to be removed with [trac:#3022 #3022], replaced by MILESTONE_ADMIN ||
 === Reports ===
+=== Reports
 || `REPORT_VIEW` || View [wiki:TracReports reports], i.e. the "view tickets" link. ||
 …
 || `REPORT_ADMIN` || All `REPORT_*` permissions ||
 === Wiki System ===
+=== Wiki System
 || `WIKI_VIEW` || View existing [wiki:TracWiki wiki] pages ||
 …
 || `WIKI_ADMIN` || All `WIKI_*` permissions, plus the management of ''readonly'' pages. ||
 === Permissions ===
+=== Permissions
 || `PERMISSION_GRANT` || add/grant a permission ||
 …
 || `PERMISSION_ADMIN` || All `PERMISSION_*` permissions ||
 === Others ===
+=== Others
 || `TIMELINE_VIEW` || View the [wiki:TracTimeline timeline] page ||
 …
 || `EMAIL_VIEW` || Shows email addresses even if [wiki:TracIni#trac-section trac show_email_addresses] configuration option is false ||
 == Creating New Privileges ==
 To create custom permissions, for example to be used in a custom workflow, enable the optional [trac:ExtraPermissionsProvider tracopt.perm.config_perm_provider.ExtraPermissionsProvider] component in the "Plugins" admin panel, and add the desired permissions to the `[extra-permissions]` section in your [wiki:TracIni#extra-permissions-section trac.ini]. For more information, please refer to the documentation of the component in the admin panel.
 == Granting Privileges ==
+== Creating New Privileges
+To create custom permissions, for example to be used in a custom workflow, enable the optional [trac:ExtraPermissionsProvider tracopt.perm.config_perm_provider.ExtraPermissionsProvider] component in the "Plugins" admin panel, and add the desired permissions to the `[extra-permissions]` section in your [wiki:TracIni#extra-permissions-section trac.ini]. For more information, please refer to the documentation  on the [wiki:TracIni#extra-permissions-section TracIni] page after enabling the component.
+== Granting Privileges
 You grant privileges to users using [wiki:TracAdmin trac-admin]. The current set of privileges can be listed with the following command:
 …
 }}}
 == Permission Groups ==
+== Permission Groups
 There are two built-in groups, "authenticated" and "anonymous".
 …
 Group membership can be checked by doing a {{{permission list}}} with no further arguments; the resulting output will include group memberships. '''Use at least one lowercase character in group names, as all-uppercase names are reserved for permissions'''.
 == Adding a New Group and Permissions ==
+== Adding a New Group and Permissions
 Permission groups can be created by assigning a user to a group you wish to create, then assign permissions to that group.
 …
 }}}
 == Removing Permissions ==
+== Removing Permissions
 Permissions can be removed using the 'remove' command. For example:
 …
 }}}
 == Default Permissions ==
+== Default Permissions
 By default on a new Trac installation, the `anonymous` user will have ''view'' access to everything in Trac, but will not be able to create or modify anything.

wiki/pages/TracPlugins

-                      r26484
+                      r37343
+= Trac plugins =
+[[TracGuideToc]]
+From version 0.9 onwards, Trac is extensible with [trac:PluginList plugins]. Plugin functionality is based on the [trac:TracDev/ComponentArchitecture component architecture], with peculiarities described in the [TracDev/PluginDevelopment plugin development] page.
+== Plugin discovery ==
+From the user's point of view, a plugin is either a standalone .py file or an .egg package. Trac looks for plugins in the global shared plugins directory (see [TracIni#GlobalConfiguration Global Configuration]) and in the `plugins` directory of the local TracEnvironment. Components defined in globally-installed plugins should be explicitly enabled in the [[TracIni#components-section| [components] ]] section of the trac.ini file.
+== Requirements for Trac eggs ==
+To use egg-based plugins in Trac, you need to have [http://peak.telecommunity.com/DevCenter/setuptools setuptools] (version 0.6) installed.
+[[PageOutline(2-5,Contents,pullout)]]
+= Trac plugins
+Trac is extensible with [trac:PluginList plugins]. Plugin functionality is based on the [trac:TracDev/ComponentArchitecture component architecture], with special cases described in the [trac:TracDev/PluginDevelopment plugin development] page.
+== Plugin discovery
+From the user's point of view, a plugin is either a standalone .py file or an .egg package. Trac looks for plugins in Python's `site-packages` directory, the [TracIni#GlobalConfiguration global shared] `plugins` directory and the [TracEnvironment project environment] `plugins` directory. Components defined in globally-installed plugins must be explicitly enabled in the [[TracIni#components-section| [components] ]] section of the `trac.ini` file. Components defined in the `plugins` directory of the project environment are enabled, unless explicitly disabled in the `[components]` section of the `trac.ini` file.
+== Requirements for Trac eggs
+To use egg-based plugins in Trac, you need to have [http://peak.telecommunity.com/DevCenter/setuptools setuptools] (version >= 0.6) installed.
 To install `setuptools`, download the bootstrap module [http://peak.telecommunity.com/dist/ez_setup.py ez_setup.py] and execute it as follows:
 {{{
+{{{#!sh
 $ python ez_setup.py
 }}}
 If the `ez_setup.py` script fails to install the setuptools release, you can download it from [http://www.python.org/pypi/setuptools PyPI] and install it manually.
+If the `ez_setup.py` script fails to install the setuptools release, you can download it from [pypi:setuptools PyPI] and install it manually.
 Plugins can also consist of a single `.py` file dropped directly into either the project's or the shared `plugins` directory.
 == Installing a Trac plugin ==
 === For a single project ===
+== Installing a Trac plugin
+=== For a single project
 Plugins are typically packaged as [http://peak.telecommunity.com/DevCenter/PythonEggs Python eggs]. That means they are .zip archives with the file extension `.egg`.
 …
  * Unpack the source. It should provide `setup.py`.
  * Run:
+{{{
+ {{{#!sh
 $ python setup.py bdist_egg
 }}}
 You should have a *.egg file. Examine the output of running python to find where this was created.
 Once you have the plugin archive, copy it into the `plugins` directory of the [wiki:TracEnvironment project environment]. Also, make sure that the web server has sufficient permissions to read the plugin egg. Then restart the web server. If you are running as a [wiki:TracStandalone "tracd" standalone server], restart tracd (kill and run again).
+You should now have an *.egg file. Examine the output of running Python to find where this was created.
+Once you have the plugin archive, copy it into the `plugins` directory of the [wiki:TracEnvironment project environment]. Also, make sure that the web server has sufficient permissions to read the plugin egg. Then restart the web server. If you are running as a [wiki:TracStandalone "tracd" standalone server], restart tracd, ie kill the process and run again.
 To uninstall a plugin installed this way, remove the egg from the `plugins` directory and restart the web server.
+Note: the Python version that the egg is built with ''must'' match the Python version with which Trac is run. For example, if you're running Trac under Python 2.5, but have upgraded your standalone Python to 2.6, the eggs won't be recognized.
+Note also: in a multi-project setup, a pool of Python interpreter instances will be dynamically allocated to projects based on need; since plugins occupy a place in Python's module system, the first version of any given plugin to be loaded will be used for all projects. In other words, you cannot use different versions of a single plugin in two projects of a multi-project setup. It may be safer to install plugins for all projects (see below), and then enable them selectively on a project-by-project basis.
+=== For all projects ===
+==== With an .egg file ====
+Some plugins (such as [trac:SpamFilter SpamFilter]) are downloadable as an `.egg` file that can be installed with the `easy_install` program:
+{{{
+easy_install TracSpamFilter
+}}}
+If `easy_install` is not on your system, see the Requirements section above to install it. Windows users will need to add the `Scripts` directory of their Python installation (for example, `C:\Python24\Scripts`) to their `PATH` environment variable (see [http://peak.telecommunity.com/DevCenter/EasyInstall#windows-notes easy_install Windows notes] for more information).
+If Trac reports permission errors after installing a zipped egg, and you would rather not bother providing a egg cache directory writable by the web server, you can get around it by simply unzipping the egg. Just pass `--always-unzip` to `easy_install`:
+{{{
+easy_install --always-unzip TracSpamFilter-0.4.1_r10106-py2.6.egg
+}}}
+You should end up with a directory having the same name as the zipped egg (complete with `.egg` extension) and containing its uncompressed contents.
+Trac also searches for plugins installed in the shared plugins directory ''(since 0.10)''; see TracIni#GlobalConfiguration. This is a convenient way to share the installation of plugins across several, but not all, environments.
+==== From source ====
+'''Note''': the Python version that the egg is built with ''must'' match the Python version with which Trac is run. For example, if you are running Trac under Python 2.6, but have upgraded your standalone Python to 2.7, the eggs won't be recognized.
+'''Note''': in a multi-project setup, a pool of Python interpreter instances will be dynamically allocated to projects based on need; since plugins occupy a place in Python's module system, the first version of any given plugin to be loaded will be used for all projects. In other words, you cannot use different versions of a single plugin in two projects of a multi-project setup. It may be safer to install plugins for all projects (see below), and then enable them selectively on a project-by-project basis.
+=== For all projects
+==== With an .egg file
+Some plugins, such as [trac:SpamFilter SpamFilter], are downloadable as an `.egg` file that can be installed with `easy_install` or `pip`:
+{{{#!sh
+$ easy_install TracSpamFilter
+$ pip install TracSpamFilter
+}}}
+If `easy_install` is not on your system, see the Requirements section above to install it. Windows users will need to add the `Scripts` directory of their Python installation (for example, `C:\Python27\Scripts`) to their `PATH` environment variable, or use the full path to `easy_install` (for example, `C:\Python27\Scripts\easy_install.py`). See [http://peak.telecommunity.com/DevCenter/EasyInstall#windows-notes easy_install Windows notes] for more information.
+`pip` is included in Python 2.7.9. In earlier versions of Python it can be installed through the package manager of your OS (e.g. `apt-get install python-pip`) or using the [https://pip.pypa.io/en/latest/installing.html#install-pip get_pip.py].
+If Trac reports permission errors after installing a zipped egg, and you would rather not bother providing an egg cache directory writable by the web server, you can get around it by simply unzipping the egg. Just pass `--always-unzip` to `easy_install`:
+{{{#!sh
+$ easy_install --always-unzip TracSpamFilter-0.4.1_r10106-py2.6.egg
+}}}
+You should end up with a directory having the same name as the zipped egg, complete with `.egg` extension, and containing its uncompressed contents.
+Trac also searches for plugins installed in the shared plugins directory, see TracIni#GlobalConfiguration. This is a convenient way to share the installation of plugins across several, but not all, environments.
+==== From source
 `easy_install` makes installing from source a snap. Just give it the URL to either a Subversion repository or a tarball/zip of the source:
 {{{
 easy_install http://svn.edgewall.com/repos/trac/plugins/0.12/spam-filter-captcha
 }}}
 ==== Enabling the plugin ====
 Unlike plugins installed per-environment, you'll have to explicitly enable globally installed plugins via [wiki:TracIni trac.ini]. This also applies to plugins installed in the shared plugins directory, i.e. the path specified in the `[inherit] plugins_dir` configuration option.
 This is done in the `[components]` section of the configuration file. For example:
 {{{
+{{{#!sh
+$ easy_install http://svn.edgewall.com/repos/trac/plugins/0.12/spam-filter-captcha
+}}}
+==== Enabling the plugin
+Unlike plugins installed per environment, you'll have to explicitly enable globally installed plugins via [wiki:TracIni trac.ini]. This also applies to plugins installed in the shared plugins directory, ie the path specified in the `[inherit] plugins_dir` configuration option.
+This is done in the `[components]` section of the configuration file `trac.ini`. For example:
+{{{#!ini
 [components]
 tracspamfilter.* = enabled
 }}}
 The name of the option is the Python package of the plugin. This should be specified in the documentation of the plugin, but can also be easily discovered by looking at the source (look for a top-level directory that contains a file named `__init__.py`).
 Note: After installing the plugin, you must restart your web server.
 ==== Uninstalling ====
 `easy_install` or `python setup.py` does not have an uninstall feature. Hower, it is usually quite trivial to remove a globally-installed egg and reference:
+The name of the option is the Python package of the plugin. This should be specified in the documentation of the plugin, but can also be easily discovered by looking at the source: look for a top-level directory that contains a file named `__init__.py`.
+After installing the plugin, you must restart your web server.
+==== Uninstalling
+Neither `easy_install` nor `python setup.py` have an uninstall feature. However, it is usually trivial to remove a globally installed egg and reference:
 . Do `easy_install -m [plugin name]` to remove references from `$PYTHONLIB/site-packages/easy-install.pth` when the plugin installed by setuptools.
 . Delete executables from `/usr/bin`, `/usr/local/bin`, or `C:\\Python*\Scripts`. To find what executables are involved, refer to the `[console-script]` section of `setup.py`.
 . Delete the .egg file or folder from where it's installed (usually inside `$PYTHONLIB/site-packages/`).
+. Delete the .egg file or folder from where it's installed, usually inside `$PYTHONLIB/site-packages/`.
 . Restart the web server.
 If you are uncertain about the location of the egg, here's a small tip to help locate an egg (or any package). Just replace `myplugin` with whatever namespace the plugin uses (as used when enabling the plugin):
 {{{
+If you are uncertain about the location of the egg file, you can try to locate it by replacing `myplugin` with whatever namespace the plugin uses (as used when enabling the plugin):
+{{{#!pycon
 >>> import myplugin
 >>> print myplugin.__file__
 …
 }}}
 == Setting up the plugin cache ==
 Some plugins will need to be extracted by the Python eggs runtime (`pkg_resources`), so that their contents are actual files on the file system. The directory in which they are extracted defaults to `.python-eggs` in the home directory of the current user, which may or may not be a problem. You can, however, override the default location using the `PYTHON_EGG_CACHE` environment variable.
+== Setting up the plugin cache
+Some plugins will need to be extracted by the Python egg's runtime (`pkg_resources`), so that their contents are actual files on the file system. The directory in which they are extracted defaults to `.python-eggs` in the home directory of the current user, which may or may not be a problem. You can, however, override the default location using the `PYTHON_EGG_CACHE` environment variable.
 To do this from the Apache configuration, use the `SetEnv` directive:
 {{{
+{{{#!apache
 SetEnv PYTHON_EGG_CACHE /path/to/dir
 }}}
 This works whether you're using the [wiki:TracCgi CGI] or the [wiki:TracModPython mod_python] front-end. Put this directive next to where you set the path to the [wiki:TracEnvironment Trac environment], i.e. in the same `<Location>` block.
 For example (for CGI):
 {{{
+This works whether you're using the [wiki:TracCgi CGI] or the [wiki:TracModPython mod_python] front-end. Put this directive next to where you set the path to the [wiki:TracEnvironment Trac environment], ie in the same `<Location>` block.
+For example for CGI:
+{{{#!apache
  <Location /trac>
    SetEnv TRAC_ENV /path/to/projenv
 …
 }}}
 Or (for mod_python):
 {{{
+Or for mod_python:
+{{{#!apache
  <Location /trac>
    SetHandler mod_python
 …
 }}}
+ ''Note: !SetEnv requires the `mod_env` module which needs to be activated for Apache. In this case the !SetEnv directive can also be used in the `mod_python` Location block.''
+'''Note''': !SetEnv requires the `mod_env` module, which needs to be activated for Apache. In this case the !SetEnv directive can also be used in the `mod_python` Location block.
 For [wiki:TracFastCgi FastCGI], you'll need to `-initial-env` option, or whatever is provided by your web server for setting environment variables.
+ ''Note: that if you already use -initial-env to set the project directory for either a single project or parent you will need to add an additional -initial-env directive to the !FastCgiConfig directive. I.e.
 {{{
+'''Note''': if you already use -initial-env to set the project directory for either a single project or parent, you will need to add an additional -initial-env directive to the !FastCgiConfig directive:
+{{{#!apache
 FastCgiConfig -initial-env TRAC_ENV=/var/lib/trac -initial-env PYTHON_EGG_CACHE=/var/lib/trac/plugin-cache
 }}}
+=== About hook scripts ===
+If you've set up some subversion hook scripts that call the Trac engine, such as the post-commit hook script provided in the `/contrib` directory, make sure you define the `PYTHON_EGG_CACHE` environment variable within these scripts as well.
+== Troubleshooting ==
+=== Is setuptools properly installed? ===
+Try this from the command line:
+{{{
+$ python -c "import pkg_resources"
+}}}
+If you get '''no output''', setuptools '''is''' installed. Otherwise, you'll need to install it before plugins will work in Trac.
+=== Did you get the correct version of the Python egg? ===
+Python eggs have the Python version encoded in their filename. For example, `MyPlugin-1.0-py2.5.egg` is an egg for Python 2.5, and will '''not''' be loaded if you're running a different Python version (such as 2.4 or 2.6).
+Also, verify that the egg file you downloaded is indeed a .zip archive. If you downloaded it from a Trac site, chances are you downloaded the HTML preview page instead.
+=== Is the plugin enabled? ===
+If you install a plugin globally (i.e., ''not'' inside the `plugins` directory of the Trac project environment), you must explicitly enable it in [TracIni trac.ini]. Make sure that:
+ * ...you actually added the necessary line(s) to the `[components]` section.
+ * ...the package/module names are correct.
+ * ...the value is "enabled", not "enable" or "Enable".
+=== Check the permissions on the .egg file ===
+Trac must be able to read the .egg file.
+=== Check the log files ===
+Enable [wiki:TracLogging logging] and set the log level to `DEBUG`, then watch the log file for messages about loading plugins.
+=== Verify you have proper permissions ===
+Some plugins require you have special permissions in order to use them. [trac:WebAdmin WebAdmin], for example, requires the user to have TRAC_ADMIN permissions for it to show up on the navigation bar.
+=== Is the wrong version of the plugin loading? ===
+If you put your plugins inside plugins directories, and certainly if you have more than one project, you need to make sure that the correct version of the plugin is loading. Here are some basic rules:
+ * Only one version of the plugin can be loaded for each running Trac server (i.e., each Python process). The Python namespaces and module list will be shared, and it cannot handle duplicates. Whether a plugin is `enabled` or `disabled` makes no difference.
+ * A globally-installed plugin (typically `setup.py install`) will override any version in the global or project plugins directories. A plugin from the global plugins directory will be located ''before'' any project plugins directory.
+ * If your Trac server hosts more than one project (as with `TRAC_ENV_PARENT_DIR` setups), having two versions of a plugin in two different projects will give uncertain results. Only one of them will load, and the one loaded will be shared by both projects. Trac will load the first plugin found, usually from the project that receives the first request.
+ * Having more than one version listed inside Python site-packages is fine (i.e., installed with `setup.py install`) -- setuptools will make sure you get the version installed most recently. However, don't store more than one version inside a global or project plugins directory -- neither version number nor installed date will matter at all. There is no way to determine which one will be located first when Trac searches the directory for plugins.
+=== If all of the above failed ===
+Okay, so the logs don't mention plugins, the egg is readable, the Python version is correct, ''and'' the egg has been installed globally (and is enabled in trac.ini)... and it ''still'' doesn't work or give any error messages or any other indication as to why. Hop on the [trac:IrcChannel IrcChannel] and ask away!
+== Web-based plugin administration ==
+The WebAdmin plugin (part of the core since 0.11) offers limited support for plugin configuration through the web to users with `TRAC_ADMIN` permission:
+=== About hook scripts
+If you have set up some Subversion hook scripts that call the Trac engine, such as the post-commit hook script provided in the `/contrib` directory, make sure you define the `PYTHON_EGG_CACHE` environment variable within these scripts as well.
+== Web-based plugin administration
+The [trac:WebAdmin] interface offers limited support for plugin configuration through the web to users with `TRAC_ADMIN` permission:
 * en/disabling installed plugins
 * installing plugins by uploading them as eggs
+You probably want to disable the second function for security reasons: in `trac.ini`, in the `[components]` section, add the line
+{{{
+If you wish to disable the second function for security reasons, add the following to your `trac.ini` file:
+{{{#!ini
+[components]
 trac.admin.web_ui.PluginAdminPanel = disabled
 }}}
 This disables the whole panel, so the first function will no longer be available either.
+== Troubleshooting
+=== Is setuptools properly installed?
+Try this from the command line:
+{{{#!sh
+$ python -c "import pkg_resources"
+}}}
+If you get '''no output''', setuptools '''is''' installed. Otherwise, you'll need to install it before plugins will work in Trac.
+=== Did you get the correct version of the Python egg?
+Python eggs have the Python version encoded in their filename. For example, `MyPlugin-1.0-py2.5.egg` is an egg for Python 2.5, and will '''not''' be loaded if you're running a different Python version (such as 2.4 or 2.6).
+Also, verify that the egg file you downloaded is indeed a .zip archive. If you downloaded it from a Trac site, chances are you downloaded the HTML preview page instead.
+=== Is the plugin enabled?
+If you install a plugin globally, ie ''not'' inside the `plugins` directory of the Trac project environment, you must explicitly enable it in [TracIni trac.ini]. Make sure that:
+ * you actually added the necessary line(s) to the `[components]` section.
+ * the package/module names are correct and do not contain typos.
+ * the value is "enabled", not "enable" or "Enable".
+ * the section name is "components", not "component".
+=== Check the permissions on the .egg file
+Trac must be able to read the .egg file.
+=== Check the log files
+Enable [wiki:TracLogging logging] and set the log level to `DEBUG`, then watch the log file for messages about loading plugins.
+=== Verify you have the proper permissions
+Some plugins require you have special permissions in order to use them. [trac:WebAdmin WebAdmin], for example, requires the user to have `TRAC_ADMIN` permissions for it to show up on the navigation bar.
+=== Is the wrong version of the plugin loading?
+If you put your plugins inside plugins directories, and certainly if you have more than one project, you need to make sure that the correct version of the plugin is loading. Here are some basic rules:
+ * Only one version of the plugin can be loaded for each running Trac server, ie each Python process. The Python namespaces and module list will be shared, and it cannot handle duplicates. Whether a plugin is `enabled` or `disabled` makes no difference.
+ * A globally installed plugin (typically `setup.py install`) will override any version in the global or project plugins directories. A plugin from the global plugins directory will be located ''before'' any project plugins directory.
+ * If your Trac server hosts more than one project (as with `TRAC_ENV_PARENT_DIR` setups), having two versions of a plugin in two different projects will give unpredicatable results. Only one of them will load, and the one loaded will be shared by both projects. Trac will load the first plugin found, usually from the project that receives the first request.
+ * Having more than one version listed inside Python site-packages is fine, ie installed with `setup.py install`, because setuptools will make sure you get the version installed most recently. However, don't store more than one version inside a global or project plugins directory: neither the version number nor the installed date will matter at all. There is no way to determine which one will be located first when Trac searches the directory for plugins.
+=== If all of the above failed
+Okay, so the logs don't mention plugins, the egg is readable, the Python version is correct, ''and'' the egg has been installed globally (and is enabled in trac.ini)... and it ''still'' doesn't work or give any error messages or any other indication as to why. Hop on the [trac:IrcChannel IrcChannel] and ask away!
 ----

wiki/pages/TracQuery

-                      r26484
+                      r37343
 = Trac Ticket Queries =
+= Trac Ticket Queries
 [[TracGuideToc]]
 In addition to [wiki:TracReports reports], Trac provides support for ''custom ticket queries'', used to display lists of tickets meeting a specified set of criteria.
+In addition to [wiki:TracReports reports], Trac provides support for ''custom ticket queries'', which can be used to display tickets that meet specified criteria.
 To configure and execute a custom query, switch to the ''View Tickets'' module from the navigation bar, and select the ''Custom Query'' link.
 == Filters ==
+== Filters
 When you first go to the query page the default filter will display tickets relevant to you:
  * If logged in then all open tickets it will display open tickets assigned to you.
  * If not logged in but you have specified a name or email address in the preferences then it will display all open tickets where your email (or name if email not defined) is in the CC list.
  * If not logged and no name/email defined in the preferences then all open issues are displayed.
+When you first go to the query page, the default filter will display tickets relevant to you:
+ * If logged in then all open tickets, it will display open tickets assigned to you.
+ * If not logged in but you have specified a name or email address in the preferences, then it will display all open tickets where your email (or name if email not defined) is in the CC list.
+ * If not logged in and no name/email is defined in the preferences, then all open issues are displayed.
 Current filters can be removed by clicking the button to the left with the minus sign on the label.  New filters are added from the pulldown lists at the bottom corners of the filters box ('And' conditions on the left, 'Or' conditions on the right).  Filters with either a text box or a pulldown menu of options can be added multiple times to perform an ''or'' of the criteria.
+Current filters can be removed by clicking the button to the left with the minus sign on the label. New filters are added from the pulldown lists at the bottom corners of the filters box; 'And' conditions on the left, 'Or' conditions on the right.  Filters with either a text box or a pulldown menu of options can be added multiple times to perform an ''Or'' on the criteria.
 You can use the fields just below the filters box to group the results based on a field, or display the full description for each ticket.
 Once you've edited your filters click the ''Update'' button to refresh your results.
+After you have edited your filters, click the ''Update'' button to refresh your results.
+== Navigating Tickets ==
+Clicking on one of the query results will take you to that ticket.  You can navigate through the results by clicking the ''Next Ticket'' or ''Previous Ticket'' links just below the main menu bar, or click the ''Back to Query'' link to return to the query page.
+== Navigating Tickets
+You can safely edit any of the tickets and continue to navigate through the results using the ''!Next/Previous/Back to Query'' links after saving your results.  When you return to the query ''any tickets which were edited'' will be displayed with italicized text.  If one of the tickets was edited such that [[html(<span style="color: grey">it no longer matches the query criteria </span>)]] the text will also be greyed. Lastly, if '''a new ticket matching the query criteria has been created''', it will be shown in bold.
+Clicking on one of the query results will take you to that ticket. You can navigate through the results by clicking the ''Next Ticket'' or ''Previous Ticket'' links just below the main menu bar, or click the ''Back to Query'' link to return to the query page.
+You can safely edit any of the tickets and continue to navigate through the results using the ''!Next/Previous/Back to Query'' links after saving your results. When you return to the query ''any tickets which were edited'' will be displayed with italicized text. If one of the tickets was edited such that [[html(<span style="color: grey">it no longer matches the query criteria </span>)]], the text will also be greyed. Lastly, if '''a new ticket matching the query criteria has been created''', it will be shown in bold.
 The query results can be refreshed and cleared of these status indicators by clicking the ''Update'' button again.
 == Saving Queries ==
+== Saving Queries
 Trac allows you to save the query as a named query accessible from the reports module. To save a query ensure that you have ''Updated'' the view and then click the ''Save query'' button displayed beneath the results.
 You can also save references to queries in Wiki content, as described below.
 ''Note:'' one way to easily build queries like the ones below, you can build and test the queries in the Custom report module and when ready - click ''Save query''. This will build the query string for you. All you need to do is remove the extra line breaks.
+'''Note:''' one way to easily build queries like the ones below, you can build and test the queries in the Custom report module and when ready - click ''Save query''. This will build the query string for you. All you need to do is remove the extra line breaks.
 ''Note:'' you must have the '''REPORT_CREATE''' permission in order to save queries to the list of default reports. The ''Save query'' button will only appear if you are logged in as a user that has been granted this permission. If your account does not have permission to create reports, you can still use the methods below to save a query.
+'''Note:''' you must have the '''REPORT_CREATE''' permission in order to save queries to the list of default reports. The ''Save query'' button will only appear if you are logged in as a user that has been granted this permission. If your account does not have permission to create reports, you can still use the methods below to save a query.
+=== Using TracLinks
+=== Using TracLinks ===
+You may want to save some queries so that you can come back to them later.  You can do this by making a link to the query from any Wiki page.
+You may want to save some queries so that you can come back to them later. You can do this by making a link to the query from any Wiki page.
 {{{
 [query:status=new|assigned|reopened&version=1.0 Active tickets against 1.0]
 …
   [query:status=new|assigned|reopened&version=1.0 Active tickets against 1.0]
 This uses a very simple query language to specify the criteria (see [wiki:TracQuery#QueryLanguage Query Language]).
+This uses a very simple query language to specify the criteria, see [wiki:TracQuery#QueryLanguage Query Language].
 Alternatively, you can copy the query string of a query and paste that into the Wiki link, including the leading `?` character:
 …
   [query:?status=new&status=assigned&status=reopened&group=owner Assigned tickets by owner]
 === Using the `[[TicketQuery]]` Macro ===
+=== Customizing the ''table'' format
+The [trac:TicketQuery TicketQuery] macro lets you display lists of tickets matching certain criteria anywhere you can use WikiFormatting.
+Example:
+{{{
+[[TicketQuery(version=0.6|0.7&resolution=duplicate)]]
+}}}
+This is displayed as:
+  [[TicketQuery(version=0.6|0.7&resolution=duplicate)]]
+Just like the [wiki:TracQuery#UsingTracLinks query: wiki links], the parameter of this macro expects a query string formatted according to the rules of the simple [wiki:TracQuery#QueryLanguage ticket query language]. This also allows displaying the link and description of a single ticket:
+{{{
+[[TicketQuery(id=123)]]
+}}}
+This is displayed as:
+  [[TicketQuery(id=123)]]
+A more compact representation without the ticket summaries is also available:
+{{{
+[[TicketQuery(version=0.6|0.7&resolution=duplicate, compact)]]
+}}}
+This is displayed as:
+  [[TicketQuery(version=0.6|0.7&resolution=duplicate, compact)]]
+Finally, if you wish to receive only the number of defects that match the query, use the ``count`` parameter.
+{{{
+[[TicketQuery(version=0.6|0.7&resolution=duplicate, count)]]
+}}}
+This is displayed as:
+  [[TicketQuery(version=0.6|0.7&resolution=duplicate, count)]]
+=== Customizing the ''table'' format ===
+You can also customize the columns displayed in the table format (''format=table'') by using ''col=<field>'' - you can specify multiple fields and what order they are displayed by placing pipes (`|`) between the columns like below:
+You can also customize the columns displayed in the table format (''format=table'') by using ''col=<field>''. You can specify multiple fields and what order they are displayed in by placing pipes (`|`) between the columns:
 {{{
 [[TicketQuery(max=3,status=closed,order=id,desc=1,format=table,col=resolution|summary|owner|reporter)]]
 …
 [[TicketQuery(max=3,status=closed,order=id,desc=1,format=table,col=resolution|summary|owner|reporter)]]
+==== Full rows ====
+In ''table'' format you can also have full rows by using ''rows=<field>'' like below:
+==== Full rows
+In ''table'' format you can also have full rows by using ''rows=<field>'':
 {{{
 [[TicketQuery(max=3,status=closed,order=id,desc=1,format=table,col=resolution|summary|owner|reporter,rows=description)]]
 …
 [[TicketQuery(max=3,status=closed,order=id,desc=1,format=table,col=resolution|summary|owner|reporter,rows=description)]]
+== Query Language
+=== Query Language ===
+`query:` TracLinks and the `[[TicketQuery]]` macro both use a mini “query language” for specifying query filters. Basically, the filters are separated by ampersands (`&`). Each filter then consists of the ticket field name, an operator, and one or more values. More than one value are separated by a pipe (`|`), meaning that the filter matches any of the values. To include a literal `&` or `|` in a value, escape the character with a backslash (`\`).
+`query:` TracLinks and the `[[TicketQuery]]` macro both use a mini “query language” for specifying query filters. Filters are separated by ampersands (`&`). Each filter consists of the ticket field name, an operator and one or more values. More than one value are separated by a pipe (`|`), meaning that the filter matches any of the values. To include a literal `&` or `|` in a value, escape the character with a backslash (`\`).
 The available operators are:
 …
 || '''`!$=`''' || the field content does not end with any of the values ||
 The date fields `created` and `modified` can be constrained by using the `=` operator and specifying a value containing two dates separated by two dots (`..`). Either end of the date range can be left empty, meaning that the corresponding end of the range is open. The date parser understands a few natural date specifications like "3 weeks ago", "last month" and "now", as well as Bugzilla-style date specifications like "1d", "2w", "3m" or "4y" for 1 day, 2 weeks, 3 months and 4 years, respectively. Spaces in date specifications can be left out to avoid having to quote the query string.
+The date fields `created` and `modified` can be constrained by using the `=` operator and specifying a value containing two dates separated by two dots (`..`). Either end of the date range can be left empty, meaning that the corresponding end of the range is open. The date parser understands a few natural date specifications like "3 weeks ago", "last month" and "now", as well as Bugzilla-style date specifications like "1d", "2w", "3m" or "4y" for 1 day, 2 weeks, 3 months and 4 years, respectively. Spaces in date specifications can be omitted to avoid having to quote the query string.
 || '''`created=2007-01-01..2008-01-01`''' || query tickets created in 2007 ||
 || '''`created=lastmonth..thismonth`''' || query tickets created during the previous month ||
 …
 ----
 See also: TracTickets, TracReports, TracGuide
+See also: TracTickets, TracReports, TracGuide, TicketQuery

wiki/pages/TracReports

-                      r26484
+                      r37343
 == Changing Report Numbering ==
 There may be instances where you need to change the ID of the report, perhaps to organize the reports better. At present this requires changes to the trac database. The ''report'' table has the following schema ''(since 0.10)'':
+There may be instances where you need to change the ID of the report, perhaps to organize the reports better. At present this requires changes to the trac database. The ''report'' table has the following schema:
  * id integer PRIMARY KEY
  * author text
 …
 Clicking on one of the report results will take you to that ticket. You can navigate through the results by clicking the ''Next Ticket'' or ''Previous Ticket'' links just below the main menu bar, or click the ''Back to Report'' link to return to the report page.
 You can safely edit any of the tickets and continue to navigate through the results using the ''!Next/Previous/Back to Report'' links after saving your results, but when you return to the report, there will be no hint about what has changed, as would happen if you were navigating a list of tickets obtained from a query (see TracQuery#NavigatingTickets). ''(since 0.11)''
+You can safely edit any of the tickets and continue to navigate through the results using the ''!Next/Previous/Back to Report'' links after saving your results, but when you return to the report, there will be no hint about what has changed, as would happen if you were navigating a list of tickets obtained from a query (see TracQuery#NavigatingTickets).
 == Alternative Download Formats ==
 …
 }}}
+Dynamic variables can also be used in the report title and description (since 1.1.1).
 == Advanced Reports: Dynamic Variables ==
 …
 }}}
-Dynamic variables can also be used in the report title and description (since 1.1.1).
 === !Special/Constant Variables ===
 …
  * '''id''' — same as '''ticket''' above when '''realm''' is not set
  * '''realm''' — together with '''id''', can be used to create links to other resources than tickets (e.g. a realm of ''wiki'' and an ''id'' to a page name will create a link to that wiki page)
+   - for some kind of resources, it may be necessary to specify their ''parent'' resources (e.g. for ''changeset'', which ''repos'') and this can be achieved using the '''parent_realm''' and '''parent_id''' columns
  * '''created, modified, date, time''' — Format cell as a date and/or time.
  * '''description''' — Ticket description field, parsed through the wiki engine.
 …
 === Reporting on custom fields ===
 If you have added custom fields to your tickets (a feature since v0.8, see TracTicketsCustomFields), you can write a SQL query to cover them. You'll need to make a join on the ticket_custom table, but this isn't especially easy.
+If you have added custom fields to your tickets (see TracTicketsCustomFields), you can write a SQL query to cover them. You'll need to make a join on the ticket_custom table, but this isn't especially easy.
 If you have tickets in the database ''before'' you declare the extra fields in trac.ini, there will be no associated data in the ticket_custom table. To get around this, use SQL's "LEFT OUTER JOIN" clauses. See [trac:TracIniReportCustomFieldSample TracIniReportCustomFieldSample] for some examples.

wiki/pages/TracRepositoryAdmin

-                      r26484
+                      r37343
 = Repository Administration =
+= Repository Administration
 [[PageOutline(2-3)]]
+== Quick start == #QuickStart
+ * Manage repositories in the "Repository" admin panel, with `trac-admin` or in the `[repositories]` section of [wiki:TracIni#repositories-section trac.ini].
+== Quick start #QuickStart
+ * Enable the repository connector(s) for the version control system(s) that you will use.
+ * Add repositories through the //Repositories// admin panel, with `trac-admin` or in the `[repositories]` section of [wiki:TracIni#repositories-section trac.ini].
  * Set up a call to `trac-admin $ENV changeset added $REPO $REV` in the post-commit hook of each repository. Additionally, add a call to `trac-admin $ENV changeset modified $REPO $REV` in the post-revprop-change hook of repositories allowing revision property changes.
+ * Set the `[trac] repository_sync_per_request` option to an empty value to disable per-request syncing.
+ * Make sure the user under which your Subversion hooks are run has write access to the Trac environment, or use a tool like `sudo` to temporarily elevate privileges.
+== Specifying repositories == #Repositories
+Starting with 0.12, Trac can handle more than one repository per environment. The pre-0.12 way of specifying the repository with the `repository_dir` and `repository_type` options in the `[trac]` section of [wiki:TracIni trac.ini] is still supported, but two new mechanisms allow including additional repositories into an environment.
+It is also possible to define aliases of repositories, that act as "pointers" to real repositories. This can be useful when renaming a repository, to avoid breaking all the links to the old name.
+A number of attributes can be associated with each repository, which define the repository's location, type, name and how it is displayed in the source browser. The following attributes are supported:
+ * Make sure the user under which your hooks are run has write access to the Trac environment, or use a tool like `sudo` to temporarily elevate privileges.
+== Enabling the components
+Support for version control systems is provided by optional components distributed with Trac, which are disabled by default //(since 1.0)//. Subversion and Git must be explicitly enabled if you wish to use them.
+The version control systems can be enabled by adding the following to the `[components]` section of your [TracIni#components-section trac.ini], or enabling the components in the //Plugins// admin panel.
+{{{#!ini
+tracopt.versioncontrol.svn.* = enabled
+}}}
+{{{#!ini
+tracopt.versioncontrol.git.* = enabled
+}}}
+== Specifying repositories #Repositories
+Trac supports multiple repositories per environment, and the repositories may be for different version control system types. Each repository must be defined in a repository configuration provider, the two supported by default are the [#ReposDatabase database store] and the [#ReposTracIni trac.ini configuration file]. A repository should not be defined in multiple configuration providers.
+It is possible to define aliases of repositories, that act as "pointers" to real repositories. This can be useful when renaming a repository, to avoid breaking links to the old name.
+A number of attributes can be associated with each repository. The attributes define the repository's location, type, name and how it is displayed in the source browser. The following attributes are supported:
 ||='''Attribute''' =||='''Description''' =||
 …
 ||The `dir` attribute specifies the location of the repository in the filesystem. It corresponds to the value previously specified in the option `[trac] repository_dir`. The `alias` and `dir` attributes are mutually exclusive. ||
 ||`hidden` ||When set to `true`, the repository is hidden from the repository index page in the source browser. Browsing the repository is still possible, and links referencing the repository remain valid. ||
+||`sync_per_request`||When set to `true` the repository will be synced on every request. This is not recommended, instead a post-commit hook should be configured to provide [#ExplicitSync explicit synchronization] and `sync_per_request` should be set to `false`.||
 ||`type` ||The `type` attribute sets the type of version control system used by the repository. Trac supports Subversion and Git out-of-the-box, and plugins add support for many other systems. If `type` is not specified, it defaults to the value of the `[trac] repository_type` option. ||
 ||`url` ||The `url` attribute specifies the root URL to be used for checking out from the repository. When specified, a "Repository URL" link is added to the context navigation links in the source browser, that can be copied into the tool used for creating the working copy. ||
 …
 A repository `name` and one of `alias` or `dir` attributes are mandatory. All others are optional.
+For some version control systems, it is possible to specify not only the path to the repository in the `dir` attribute, but also a ''scope'' within the repository. Trac will then only show information related to the files and changesets below that scope. The Subversion backend for Trac supports this. For other types, check the corresponding plugin's documentation.
 After adding a repository, the cache for that repository must be re-synchronized once with the `trac-admin $ENV repository resync` command.
 …
 === In `trac.ini` === #ReposTracIni
+=== In `trac.ini` #ReposTracIni
 Repositories and repository attributes can be specified in the `[repositories]` section of [wiki:TracIni#repositories-section trac.ini]. Every attribute consists of a key structured as `{name}.{attribute}` and the corresponding value separated with an equal sign (`=`). The name of the default repository is empty.
 …
 The following example defines two Subversion repositories named `project` and `lib`, and an alias to `project` as the default repository. This is a typical use case where a Trac environment previously had a single repository (the `project` repository), and was converted to multiple repositories. The alias ensures that links predating the change continue to resolve to the `project` repository.
+{{{
+#!ini
+{{{#!ini
 [repositories]
 project.dir = /var/repos/project
 …
 Note that `name.alias = target` makes `name` an alias for the `target` repo, not the other way around.
 === In the database === #ReposDatabase
+=== In the database #ReposDatabase
 Repositories can also be specified in the database, using either the "Repositories" admin panel under "Version Control", or the `trac-admin $ENV repository` commands.
 …
 Note that the default repository has an empty name, so it will likely need to be quoted when running `trac-admin` from a shell. Alternatively, the name "`(default)`" can be used instead, for example when running `trac-admin` in interactive mode.
+== Repository synchronization == #Synchronization
+== Repository caching
+The Subversion and Git repository connectors support caching, which improves the performance browsing the repository, viewing logs and viewing changesets. Cached repositories must be [#Synchronization synchronized]; either explicit or implicit synchronization can be used. When searching changesets, only cached repositories are searched.
+Subversion repositories are cached unless the type is `direct-svnfs`. Git repositories are cached when `[git]` [wiki:TracIni#git-section cached_repository] is `true`.
+== Repository synchronization #Synchronization
 Prior to 0.12, Trac synchronized its cache with the repository on every HTTP request. This approach is not very efficient and not practical anymore with multiple repositories. For this reason, explicit synchronization through post-commit hooks was added.
 There is also new functionality in the form of a repository listener extension point ''(IRepositoryChangeListener)'' that is triggered by the post-commit hook when a changeset is added or modified, and can be used by plugins to perform actions on commit.
 === Mercurial Repositories ===
+=== Mercurial Repositories
 Please note that at the time of writing, no initial resynchronization or any hooks are necessary for Mercurial repositories - see [trac:#9485] for more information.
 === Explicit synchronization === #ExplicitSync
 This is the preferred method of repository synchronization. It requires setting the `[trac]  repository_sync_per_request` option in [wiki:TracIni#trac-section trac.ini] to an empty value, and adding a call to `trac-admin` in the post-commit hook of each repository. Additionally, if a repository allows changing revision metadata, a call to `trac-admin` must be added to the post-revprop-change hook as well.
+=== Explicit synchronization #ExplicitSync
+This is the preferred method of repository synchronization. It requires setting the `sync_per_request` attribute to `false`, and adding a call to `trac-admin` in the `post-commit` hook of each repository. Additionally, if a repository allows changing revision metadata, a call to `trac-admin` must be added to the `post-revprop-change` hook as well.
  `changeset added <repos> <rev> [...]`::
 …
 The `<repos>` argument can be either a repository name (use "`(default)`" for the default repository) or the path to the repository.
+Note that you may have to set the environment variable PYTHON_EGG_CACHE to the same value as was used for the web server configuration before calling trac-admin, if you changed it from its default location. See [wiki:TracPlugins Trac Plugins] for more information.
+Note that you may have to set the environment variable `PYTHON_EGG_CACHE` to the same value as was used for the web server configuration before calling `trac-admin`, if you changed it from its default location. See [wiki:TracPlugins Trac Plugins] for more information.
+==== Subversion
 The following examples are complete post-commit and post-revprop-change scripts for Subversion. They should be edited for the specific environment, marked executable (where applicable) and placed in the `hooks` directory of each repository. On Unix (`post-commit`):
 …
 /usr/bin/trac-admin /path/to/env changeset added "$1" "$2"
 }}}
+Note: Ubuntu doesn't seem to like /usr/bin/trac-admin, so just use:
+{{{#!sh
+#!/bin/sh
+export PYTHON_EGG_CACHE="/path/to/dir"
+trac-admin /path/to/env/ changeset added "$1" "$2"
+}}}
+Note: Check with `whereis trac-admin`, whether `trac-admin` is really installed under `/usr/bin/` or maybe under `/usr/local/bin/` and adapt the path.
 On Windows (`post-commit.cmd`):
 {{{#!application/x-dos-batch
+{{{#!bat
 @C:\Python26\Scripts\trac-admin.exe C:\path\to\env changeset added "%1" "%2"
 }}}
 …
 }}}
 On Windows (`post-revprop-change.cmd`):
 {{{#!application/x-dos-batch
+{{{#!bat
 @C:\Python26\Scripts\trac-admin.exe C:\path\to\env changeset modified "%1" "%2"
 }}}
 …
 See the [http://svnbook.red-bean.com/en/1.5/svn.reposadmin.create.html#svn.reposadmin.create.hooks section about hooks] in the Subversion book for more information. Other repository types will require different hook setups.

Context Navigation

Legend: