Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Form _submit and _validate callbacks should not call user_access() checks. Doing so interferes with form processing and can break hook_form_alter().
aggregator_categorize_items() is only called by _aggregator_page_list(), which only loads the form if the permission check passes.
Comment | File | Size | Author |
---|---|---|---|
#1 | 687578-aggregator.patch | 2 KB | agentrickard |
Comments
Comment #1
agentrickardAnd a patch.
Comment #2
Dave ReidConfirmed. This makes a lot of sense since this form will never be displayed if the user doesn't have this permission.
Comment #3
Dries CreditAttribution: Dries commentedCommitted to CVS HEAD. Thanks.