in my actual use case, the user trying to authenticate through oauth and returning to oauth/authorized (still anonymous at that stage) has not (and should not have) the "access content" permission.

I suggest that we have a specific permission for that menu entry.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

garphy’s picture

Status: Active » Needs review
FileSize
845 bytes

Patch.

MustangGB’s picture

Issue summary: View changes
Status: Needs review » Needs work

Yes please!

My only comment is that it should appear first in the hook_permission list, rather than last, for consistency with other permissions normally the "safer" ones are at the top, and the "restricted" ones are at the bottom.

Nitesh Sethia’s picture

Status: Needs work » Needs review
FileSize
909 bytes

Updated the patch as per the last comment.