Install

Works with Drupal: 7.x

Using Composer to manage Drupal site dependencies

Downloads

Download nodeaccess_userreference-7.x-3.10.tar.gztar.gz 14.8 KB
MD5: 120581176637fbb4416bbae79631a9af
SHA-1: e0f8360a13f193117de37cdd5e06df09db36d819
SHA-256: 3c68ba4c6142b5d75701c26c8f0509665f066b2f8fbfc58f4beec2e5d92818af
Download nodeaccess_userreference-7.x-3.10.zipzip 17.56 KB
MD5: 43ffe744da3de2fd6ede1383c18fdc7a
SHA-1: ed9ee69046099f4e7ffa8442ac4608c429abb4f1
SHA-256: 98cafe2875ec326a30b9fe2e9cf7ce7686323249806c27244e38d5e7536a50bf

Release notes

When an author has created content containing a user reference field (with author update/delete grants enabled) and the author's user account is later deleted, content created by them can be edited by anonymous users.

This release fixes this issue.
SA-CONTRIB-2013-049 - Node access user reference - Access Bypass

Created by: galooph
Created on: 29 May 2013 at 14:41 UTC
Last updated: 29 May 2013 at 15:36 UTC
Security update

Other releases