Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
There's no permission for the settings page (admin/config/media/media_browser_plus_settings), 'administer files' is used, but I find it kind of odd that it's using this permission for it's settings page.
The media module uses the same permission, but there's is an issue and a patch for this.
Issue: http://drupal.org/node/1857218
I'm working of version 7.x-2.x-dev due to the use older media module (unstable-3) version we are using and will add a patch for this permission in a sec. Maybe it could be used for later versions.
Cheers
Comment | File | Size | Author |
---|---|---|---|
#1 | media_browser_plus_permission-1965310-2.patch | 1.05 KB | ericclaeren |
Comments
Comment #1
ericclaeren CreditAttribution: ericclaeren commentedThe patch.
Comment #2
AnybodyThe current implementation opens security holes for users who should not administer a module, so I'll set up the priority. The patch is tested and RTBC.
Please create a new stable release.
Comment #3
AnybodyThis solution is easier and better. It prevents an unnecessary additional permission:
#2223841: Add separate permission to use vs administer settings