Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 PST on 31 March 2024, to get $100 off your ticket.
JQuery UI uses the permission called "access site configuration" when it's really called "administer site configuration".
This leads to admin/settings/jquery_ui being accessible for all users.
Not much harm they can do to the site, but still.. should be easy to fix, yeah?
Comment | File | Size | Author |
---|---|---|---|
#2 | jquery_ui-DRUPAL-5.patch | 1.24 KB | sun |
Comments
Comment #1
chirale CreditAttribution: chirale commentedI've noticed the same problem. The item is available to all anonymous users under Navigation menu.
Comment #2
sunThanks, committed attached patch.
Comment #3
Anonymous (not verified) CreditAttribution: Anonymous commentedAutomatically closed -- issue fixed for two weeks with no activity.