I notice users who shouldn't have access can see the mass contact when creating content even though they don't have access, is this a bug ?

Comments

oadaeh’s picture

oadaeh commented

This should not be happening. Are you still seeing this behavior?

Anonymous’s picture

Anonymous (not verified) commented
Status: Active » Postponed (maintainer needs more info)

I've tested this. Neither anonymous users nor authenticated users without the corresponding right could add a mass contact message. I use the latest dev release.

mgifford’s picture

mgifford
he/him
Primary language English
commented

I checked using the latest stable release for anonymous users and didn't find a problem either. Checked all of the admin pages as well as the /mass_connect page (which really needs more links to it from the menu or something).

mrtoner’s picture

mrtoner commented
Status: Postponed (maintainer needs more info) » Closed (fixed)

No further information in last year. I'll assume this has been resolved.