JQuery UI uses the permission called "access site configuration" when it's really called "administer site configuration".

This leads to admin/settings/jquery_ui being accessible for all users.
Not much harm they can do to the site, but still.. should be easy to fix, yeah?

CommentFileSizeAuthor
#2 jquery_ui-DRUPAL-5.patch1.24 KBsun

Comments

chirale’s picture

chirale commented
Priority: Normal » Critical

I've noticed the same problem. The item is available to all anonymous users under Navigation menu.

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Status: Active » Fixed
StatusFileSize
new jquery_ui-DRUPAL-5.patch1.24 KB

Thanks, committed attached patch.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.