Closed (fixed)
Project:
Restrict Login or Role Access by IP Address
Version:
9.x-dev
Component:
Code
Priority:
Major
Category:
Bug report
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
12 Apr 2022 at 14:14 UTC
Updated:
13 Jul 2026 at 02:50 UTC
Jump to comment: Most recent
Comments
Comment #2
amairesse commentedHi,
Same issue here.
As a note, I have noticed that
- If the admin user opening the edit form is logged in on an IP address allowed for the given role, (s)he will see this role checked if it is set
- This behavior seems not to affect all roles (I didn't identify a pattern yet)
Comment #3
rocketeerbkw commentedThe "Needs Work" status is used when a patch/merge request still needs changes, but there isn't one yet.
Comment #4
anybodyThis is a major issue in my eyes. The fix should have tests and we should check if saving such a user profile then also removes its roles!
Comment #6
darvanenComment #8
darvanenRemoved the module hook which stripped the roles from the user edit form, definite bug. There's a bit more test coverage in there now. Could use another set of eyes.
I was assisted by AI for this work.
Comment #9
darvanenIt's worth pointing out that admins will now be able to allocate roles that they were technically blocked from allocating before. I see that as a responsibility of https://www.drupal.org/project/role_delegation to handle, not this module.
Comment #11
darvanenThat's long enough to wait for something in an unreleased branch :)
Thanks everyoe for your help!