The 2026 Drupal Business Survey is open. Your response will help shape the future of the Drupal business ecosystem.Hello,
Only the twitter module is enabled and the permission "Add authenticated Twitter accounts" is set for authenticated users. What I want is to let each authenticated user to configure his own auth twitter account.
If I sign in as uid = 3 and navigate to /user/3/edit/twitter it gives me the right twitter settings page. There is another auth user with uid = 2 on the system. If I navigate to /user/2/edit/twitter I can access and add authenticated twitter accounts for this user too! I naturally don't have access to /user/2/edit.
I think this is a bug. Any ideas?
Thank you for this great module!
Chris
| Comment | File | Size | Author |
|---|---|---|---|
| #8 | twitter-n1895472-8-6.x-5.x.patch | 1.78 KB | damienmckenna |
| #6 | twitter-n1895472-6-7.x-6.x.patch | 1.82 KB | damienmckenna |
| #5 | twitter-n1895472-5-7.x-5.x.patch | 1.82 KB | damienmckenna |
Comments
Comment #1
Adirael commentedI'm trying to fix the same issue.
Comment #2
Adirael commentedI created a patch that fixed this for me. It adds a 'administer own twitter accounts' permission. It may be good to change a bit the granularity of the permissions but since this is the first time I add a patch here I prefer to keep it as simple as possible .
Comment #3
damienmckennaComment #4
damienmckennaI think this is a better approach - use the permissions already there but only allow you to view someone else's account if you have the 'administer users' permission.
Comment #5
damienmckennaFor 7.x-5.x
Comment #6
damienmckennaFor 7.x-6.x.
Comment #8
damienmckennaForgot to add some code to the 6.x-5.x patch to rebuild the menu cache.
Comment #9
damienmckennaCommitted.
Comment #12
damienmckennaClosed a duplicate: #1344952: Users with twitter global account access should not be able to delete account