The biggest fix is that if a user can't see the plugin we don't return drupal_not_found(). Also the access check was weird -- checking if the user has logged in.

1) Patch now returns early if there's no access.
2) Patch checks access using user_access()

CommentFileSizeAuthor
fix-user-profile.patch1.12 KBamitaibu

Comments

merlinofchaos’s picture

merlinofchaos commented
Status: Needs review » Fixed

Oh man. That drupal_not_found() was STILL in there? I feel bad about that. I've seen it at least twice and I never actually come back around and fix it. Thanks for the patch!

merlinofchaos’s picture

merlinofchaos commented

I also backported this to 6.x, just changed the clone to drupal_clone() -- everything else seems okay.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.