Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.The permission specified in the access arguments is 'administer group member profile types', but this is not defined anywhere else.
| Comment | File | Size | Author |
|---|---|---|---|
| #6 | gprofile-permission-2574315-6.patch | 600 bytes | johnennew |
| #2 | gprofile-permission_2574315.patch | 819 bytes | scott.melton |
Comments
Comment #2
scott.melton CreditAttribution: scott.melton as a volunteer commentedAdding hook_permission call with 'administer group member profile types'; this permission is needed for gprofile_entity_info_alter().
Comment #3
kristiaanvandeneyndeHi there Scott and thanks for using Group!
I'll look into your patch as soon as the post-DrupalCon workload is gone. Looks like you caught a simple oversight, though. So a fix (commit) should come soon.
Comment #4
Greg Varga CreditAttribution: Greg Varga commentedMaybe this is an oversight on my part but I can't see a permission to allow a member to 'edit own profile'. Sorry if I am missing something, but I thought this could be relevant to this issue.
Comment #5
johnennew CreditAttribution: johnennew at Deeson commented@Gergely Varga - Users can edit their own profile if they are granted the Edit own membership permission.
@scott.melton - I applied the patch in #2, granted the new permission to a user and that user still got an access denied on the path admin/group/member/manage/mynewprofile This is due to gprofile_type_access requiring the configure group module permission.
Is this administer group member profile types permission actually needed? Is there a need for providing such a fine grained permission or should we just change the required permission in gprofile_entity_info_alter for configure group module
Comment #6
johnennew CreditAttribution: johnennew at Deeson commentedpatch for review
Comment #7
kristiaanvandeneyndeYup, no idea how I put that permission in there in the first place. Seeing as this is group configuration and all config so far has been gated behind "configure group module", let's roll with that.
Comment #8
kristiaanvandeneynde