Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
How to reproduce:
- In "Administration -> Configuration -> Organic groups -> OG permissions overview -> Node - Group permissions", add the "Add user" privilege to group members.
- As an anonymous user, open a group URL in the Drupal frontend. This page now has an added tab "Administer group" with an option to add members to the group.
In my understanding, this is non-desired behavior because I did not give the "Add user" privilege to non-members of the group. (And even if I had done so, it should probably still be forbidden for anonymous users?)
Comments
Comment #1
ezra-g CreditAttribution: ezra-g commentedMoving to the main Commons issue queue - Thanks for the bug report.
Comment #2
ezra-g CreditAttribution: ezra-g commentedI'm not able to reproduce this. Can you post any more steps to reproduce?
I'm in the #drupal-commons channel on IRC if you'd like to discuss in real-time. Thanks!
Comment #3
lsolesen CreditAttribution: lsolesen commented