Draggableviews adds a contextual link to the 'Order view' page. Now if you do not have access to the order view page, when you click on it, it gives a 403 Access Denied page.

There needs to be a page access check before the link is added.

(FYI - you need to have contextual link permission).

CommentFileSizeAuthor
#1 draggableviews-403_context_link_order_view-1913704-1.patch957 bytesiStryker
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

iStryker’s picture

iStryker CreditAttribution: iStryker commented
Status: Active » Fixed
FileSize
draggableviews-403_context_link_order_view-1913704-1.patch957 bytes

Attached is the patch

Code taken from http://drupal.stackexchange.com/questions/5964/check-if-user-has-access-...

Comitted 771ea4c to 7.x-2.x-dev.

I tried to find contextual links for 6.x-3.x-dev, but it looks like there is none. This will not be backported.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.