After switching users with Devel, I see the full menu of the previous user 1 (but obviously don't have access to anything).

Might only be the case with client-side caching.

CommentFileSizeAuthor
#3 admin_menu.cache-id.2.patch1.1 KBsun

Comments

sun’s picture

sun
Primary language German
Location Karlsruhe
commented

Looks like the server cache ID is broken.

When disabling client-side caching and only keeping the server cache enabled, this issue still appears (when switching users).

The cache ID was recently changed from $uid to session_id() in #1189672-12: Admin menu "flush all caches" open to csrf

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Title: Wrong menu is shown » Menu is cached by session ID, but session ID does not change when switching users via Devel
Status: Active » Fixed

Thanks for reporting, reviewing, and testing! Committed attached patch to all branches.

A new development snapshot will be available within the next 12 hours. This improvement will be available in the next official release.

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
StatusFileSize
new admin_menu.cache-id.2.patch1.1 KB

Automatically closed -- issue fixed for 2 weeks with no activity.