I have heard reports that locked platforms can still be available to build sites on, even for users without the special 'create sites on locked platforms' permission. In this case, the user had only 'aegir client' and 'aegir account manager' roles.

Comments

ergonlogic created an issue. See original summary.

ergonlogic’s picture

Title: Locked platforms available to build sites on » Locked platforms available when migrate platforms
Version: 7.x-3.4 » 7.x-3.x-dev

Update title to specify actual issue.

  • ergonlogic committed 5130aab on 7.x-3.x
    Issue #2697179: Only list allowed/unlocked platforms during platform...
ergonlogic’s picture

Status: Active » Fixed
Related issues: +#725952: implement node-level access permissions for platforms

I added a simple fix in 5130aab, pending broader re-factoring of platform node access:

- $platforms = _hosting_get_platforms();
+ // TODO: hosting_get_enabled_platforms should be sufficient here, except
+ // that we haven't implemented node-level access control on platforms yet.
+ // See: http://drupal.org/node/725952.
+ if (function_exists('_hosting_get_allowed_platforms')) {
+ $platforms = _hosting_get_allowed_platforms();
+ }
+ else {
+ $platforms = _hosting_get_enabled_platforms();
+ }

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.