$items[] = array(
      'path' => 'admin/settings/mbs', 
      'title' => t('Menu block split'),
      'access' => user_access('maintain personal blog'),
      'callback' => 'drupal_get_form',
      'callback arguments' => array('menu_block_split_settings'),
      'access' => user_access('administer menu block split'),
      'description' => t('Settings for Menu Block Split'),
    );

Shouldn't the first access (with the 'maintain personal blog' string in) be removed ? Didn't add a patch since this is quite trivial to fix.

Comments

David Stosik’s picture

David Stosik commented
Priority: Normal » Critical

Same problem on 1.2 version.
Also, the permission defined is 'administer menu block split module.' , and user_access is called with the argument 'administer menu block split'.
This is pretty critical and touches many versions...

robertgarrigos’s picture

robertgarrigos commented
Status: Active » Fixed

fixed in both branches. commited to dev . thanks

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.