When creating a new role with the permission "access administration pages", they could access the VAPN configuration page. We should make the permissions for that page specific to the module, especially since the permission already exists.

I've included a patch in the comments.

Comments

ericawright created an issue. See original summary.

ericawright’s picture

StatusFileSize
new714 bytes
ericawright’s picture

StatusFileSize
new713 bytes

I had the wrong email address in my last patch. Just fixing that.

truls1502’s picture

StatusFileSize
new786 bytes

Great process Erica, I might have a different suggestion to split between using the vapn-module and manage from the config page.

truls1502’s picture

Version: 8.x-1.0 » 8.x-1.1
truls1502’s picture

StatusFileSize
new786 bytes

Reorder the permission list

rafuel92’s picture

Status: Needs review » Fixed

included in 8.x-1.4, thanks to everybody

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.