_asset_page_match() doesn't check for user permission on 'create assets' or any other permissions. So, it always displays the link. For everyone...

Patch to follow shortly

CommentFileSizeAuthor
#1 asset_235051_1.patch665 bytesmfer

Comments

mfer’s picture

mfer commented
Status: Active » Needs review
StatusFileSize
new asset_235051_1.patch665 bytes

A patch to _asset_page_match() that solves this. Not sure if this permissions check fits with the permissions scheme of the module though.

wmostrey’s picture

wmostrey commented
Assigned: Unassigned » wmostrey
Status: Needs review » Reviewed & tested by the community

I also added the "administer assets" permission. Thanks for pointing this out, will be committed to dev tonight.

wmostrey’s picture

wmostrey commented
Status: Reviewed & tested by the community » Fixed

Committed to dev, thanks a lot Matt!

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.