Problem/Motivation
The module doesn't currently provide a method to limit access to viewing/using the debugger, which means that once the module has been enabled, the debugger is displayed globally to everyone.
Steps to reproduce
Just install the module and activate it. Make sure Drupal TWIG debugging is activated. Confirm the debugger console is showing to admin users. Then, on a separate anonymous window, navigate to a website frontpage as an anonymous user and confirm that user can also see the debugger.
Proposed resolution
These are the suggested changes:
- Create a new permission to limit the roles that can see/use the debug console.
- Update the code accordingly to make sure the debugger is not activated/displayed to roles not selected.
Remaining tasks
Apply all code updates.
User interface changes
There are no user interface changes.
API changes
--
Data model changes
--
Issue fork visual_debugger-3479462
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #2
mabho commentedComment #4
mabho commentedComment #6
mabho commented