Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
8 Feb 2015 at 15:44 UTC
Updated:
11 Jun 2016 at 12:24 UTC
Jump to comment: Most recent
Comments
Comment #1
PA robot commentedWe are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and put yourself on the high priority list, then we will take a look at your project right away :-)
Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #2
anavarreScanned the module quickly:
In node_view_access.install
Per https://www.drupal.org/node/2193013 hook_disable() has been removed.
In node_view_access.module
hook_node_access() is missing $langcode
In NodeViewAccessPermissions.php
use Drupal\Core\Routing\UrlGeneratorTrait;Is unused.
Comment #3
willzyx commented@anavarre
Thanks for reviewing. Changes have been applied according to your feedback.
Comment #4
willzyx commentedUpdate priority according to guidelines at https://drupal.org/node/539608
Comment #5
mitchalbert commentedAutomated Review
Pass
Manual Review
If added, please don't remove the security tag, we keep that for statistics and to show examples of security problems.
This review uses the Project Application Review Template.
Comment #6
willzyx commented@mitchalbert thanks for reviewing I really appreciate
Comment #7
willzyx commentedUpdate priority according to guidelines at https://drupal.org/node/539608
Comment #8
FreeAndEasy commentedReview of the 8.x-1.x branch
Really cool and useful module!
Automated Review
no issues
Manual Review
Comment #9
gbyteThe module provides functionality which should have been implemented in D8 from the start.
There is no duplication, the code is well written and documented and the module respects the node grants system working well with core's grants and other permission granting modules (I tested it with ACL / Content access).
The module is working es expected.
FreeAndEasy mentioned, the viewing access should be granted upon the installation of the module to avoid an inaccessible site. I guess you could do that, but alternatively a warning should appear after enabling the module warning about all nodes being inaccessible until proper viewing permissions are set. Drupal users should be accustomed to explicitly set access.
All in all this should be very much a full dev project, setting it RTBC.
Comment #10
damienmckennaThanks for your contribution, Marco!
I updated your account so you can promote this to a full project and also create new projects as either a sandbox or a "full" project.
Here are some recommended readings to help with excellent maintainership:
You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and stay involved!
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
Thanks to the dedicated reviewer(s) as well.