The menu page module defines new menu aggregation pages as an easy way to access menus for editors.
However those aggregations pages are too open.

But the impact is minimal since the underlying pages all have stricter access checks, regardless this should be fixed.

CommentFileSizeAuthor
#3 dvg_ct_menu_page-restrict_menu_access-3040519-3.patch831 bytespaulvandenburg
#2 dvg_ct_menu_page-restrict_menu_access.patch831 bytespaulvandenburg

Comments

paulvandenburg created an issue. See original summary.

paulvandenburg’s picture

paulvandenburg commented
Status: Active » Needs review
StatusFileSize
new dvg_ct_menu_page-restrict_menu_access.patch831 bytes

This fixes the issue.

paulvandenburg’s picture

paulvandenburg commented
StatusFileSize
new dvg_ct_menu_page-restrict_menu_access-3040519-3.patch831 bytes

Same patch but better patch name.

joshahubbers’s picture

joshahubbers commented

Looks good to me.

joshahubbers’s picture

joshahubbers commented
Title: Menu aggregation pages are too open » Menu aggregation pages are to open
Status: Needs review » Reviewed & tested by the community
joshahubbers’s picture

joshahubbers commented
Title: Menu aggregation pages are to open » Menu aggregation pages are too open

  • paulvandenburg committed 704bb94 on 7.x-1.x 
    Issue #3040519 by paulvandenburg: Menu aggregation pages are too open
paulvandenburg’s picture

paulvandenburg commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.