On entering a internal path to the link path in the Global link area which a authenticated user should have access. It is displayed on the page for anonymous user also.
The link should only be visible to user who has access to it.

CommentFileSizeAuthor
#2 do-not-check-access-2668790-1.patch666 bytespradeep22saini

Comments

pradeep22saini created an issue. See original summary.

pradeep22saini’s picture

pradeep22saini commented
Status: Needs work » Needs review
StatusFileSize
new do-not-check-access-2668790-1.patch666 bytes

Adding check for the internal path and adding check for valid path access.

kristofferwiklund’s picture

kristofferwiklund commented
Title: Do not check access for internal path links » Do check access for internal path links

I don't think this is needed.

In views_handler_area_link.inc the path is check with:

$router_item = menu_get_item($path);
if ($router_item && !$router_item['access']) {
  return '';
}

And that is the same function that drupal_valid_path uses.

I have tried creating a link with url /node/add/news and as anonymous I don't see that link.

minoroffense’s picture

minoroffense commented
Status: Needs review » Fixed

Pretty sure this is covered in the new dev release. If it's still a bug please reopen.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.