Everyone with access to administration pages, for example editors, has access the search404 administration page. In my opinion, this is too open.

I propose to re-use core's Search module administration permission.

CommentFileSizeAuthor
#5 edit_issue-2690897-1.patch508 bytesglen.pinheiro
#2 search404-admin-access-2690897-2.patch374 bytessutharsan

Comments

Sutharsan created an issue. See original summary.

sutharsan’s picture

sutharsan commented
Status: Active » Needs review
StatusFileSize
new search404-admin-access-2690897-2.patch374 bytes

This patch changes the permission to 'administer search'.

anish.a’s picture

anish.a commented
Assigned: Unassigned » anish.a

Patch looks good. Have to port it to 7.x also. Taking this.

glen.pinheiro’s picture

glen.pinheiro commented
Assigned: anish.a » glen.pinheiro
glen.pinheiro’s picture

glen.pinheiro commented
StatusFileSize
new edit_issue-2690897-1.patch508 bytes

Added patch for Drupal 7.x

anish.a’s picture

anish.a commented
Assigned: glen.pinheiro » anish.a
Status: Needs review » Reviewed & tested by the community

anish.a’s picture

anish.a commented
Status: Reviewed & tested by the community » Closed (fixed)

Patch is committed. Thanks to Sutharsan and Glen.

anish_zyxware’s picture

anish_zyxware commented