RSS Feeds on private trackers report "Tiki RSS Feed Error Message: You do not have permission to view this section"

• Error
• Usability
• Patch

I am pretty new at this, so I am not sure if I posted the bug and patch at the correct place and in the correct form. Please let me know if I should change something. Unfortunately I do not have time at the moment to learn how to commit patches via SVN and am also a bit unsure about my fix, so please take a look and include it in the next release if you think it is correct.

Scenario:
Tiki LTS 6.6, Tracker not publicly accessible (by anonymous users), RSS Feeds enabled, RSS for Trackers and for Individual tracker items enabled, RSS basic Authentication enabled.

Behaviour:
If I try to subscribe to the RSS feeds of my tracker (by adding http://tiki.***.***/tiki-tracker_rss.php?trackerId=9 to Outlook) I always get the error "Tiki RSS Feed Error Message: You do not have permission to view this section". Same happens if I log out of Tiki and copy the address in my browser.

It seems that Tiki never asks for a user name and password to login for Tracker RSS (which it does for Wiki RSS) and always assumes publicly available content. After comparing "tiki-tracker_rss.php" and "tiki-wiki_rss.php" I found these lines to be missing in the "tiki-tracker_rss.php" file. I figured out they are responsible for authenticating the RSS reader and after adding them below ...if (!isset($_REQUEST%22trackerId%22))... it worked.

$res=$access->authorize_rss(array('tiki_p_view', 'tiki_p_wiki_view_ref'));
if($res) {
   if($res['header'] == 'y') {
      header('WWW-Authenticate: Basic realm="'.$tikidomain.'"');
      header('HTTP/1.0 401 Unauthorized');
   }
   $errmsg=$res['msg'];
   require_once ('tiki-rss_error.php');
}

This bug has been demonstrated on show2.tikiwiki.org

Please demonstrate your bug on show2.tikiwiki.org