Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Introduced on commit in #1677054: Use file_entity_access() instead of media_access(), the access check for the media browser upload plugin uses the file_entity_access() API incorrectly.
I'm not sure exactly what the consequences are, but most likely it will result in the "create" permissions not being checked correctly.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | media-browser-upload-1877214-1.patch | 489 bytes | David_Rothstein |
Comments
Comment #1
David_Rothstein commentedI guess it depends on if $account is actually passed in; in the case where it isn't, it's NULL anyway so this bug has no effect.
Easy to fix either way, though. The attached patch is untested but I'm pretty sure it should work.
Comment #2
ParisLiakos commentedugh, good catch!
Comment #3
ParisLiakos commentedthanks, commited
Comment #4.0
(not verified) commentedfix typo