Views such as "Latest blog post comments" don't fully enforce the node access system and display the titles of comments and paths of nodes to which the user does not have access, such as nodes in a private group.

These views check that nodes are published and that the user has the "access comments" permission, but not more general node access (such as OG node access control).

commons-comments-node-access.patch56.07 KBezra-g
Members fund testing for the Drupal project. Drupal Association Learn more


laurentc’s picture

Status: Needs review » Reviewed & tested by the community

Reviewed and tested.
Thanks for the patch

ezra-g’s picture

Status: Reviewed & tested by the community » Fixed

Thanks for the review. This is committed:

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.