There is no view access check when rendering a "View Area" (handler = views_handler_area_view).

CommentFileSizeAuthor
#2 1257568-2.patch1.87 KBrecrit
#1 1257568.patch1.87 KBdawehner
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

dawehner’s picture

dawehner
Primary language German
CreditAttribution: dawehner commented
Status: Active » Needs review
FileSize
1257568.patch1.87 KB

Here is a patch for it.

Additional renamed a variable.

recrit’s picture

recrit CreditAttribution: recrit commented
Status: Needs review » Reviewed & tested by the community
FileSize
1257568-2.patch1.87 KB

re-rolled with !$view->access($display_id).
I tested this new patch and everything worked well.

dawehner’s picture

dawehner
Primary language German
CreditAttribution: dawehner commented
Status: Reviewed & tested by the community » Fixed

Commited to 7.x as the other branches doesn't have this feature.

Thanks recrit for creating a real tested patch :)

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.