Problem/Motivation

A user who is not logged in goes to an administrative listing after they delete their form submission using a token.

Steps to reproduce

* create a webform with token form submission deletion
* go to the form as an unregistered user
* create a submission
* edit your submission
* delete the submission

You will find yourself on an unhelpful page.

Proposed resolution

Patch from https://www.drupal.org/project/webform/issues/3158114 by https://www.drupal.org/u/itssimple

Remaining tasks

Create new patch for new version of webform.

CommentFileSizeAuthor
#7 3215887-7.patch1.07 KBloopy1492
#4 webform.webform.issue_3215887.yml4.94 KBjrockowitz
#2 3215887-1.patch1.09 KBloopy1492

Comments

loopy1492 created an issue. See original summary.

loopy1492’s picture

loopy1492 commented
StatusFileSize
new 3215887-1.patch1.09 KB
loopy1492’s picture

loopy1492 commented

I have tested this locally and it seems to work. It redirects the user back to the blank form. Thanks again to https://www.drupal.org/u/itssimple

jrockowitz’s picture

jrockowitz commented
Status: Active » Postponed (maintainer needs more info)
StatusFileSize
new webform.webform.issue_3215887.yml4.94 KB

I am not able to replicate this issue using the attached webform. When I go to the delete URL on the confirmation page, it redirects beck to the webform.

jrockowitz’s picture

jrockowitz commented

I did find #3216393: Token is not appended to delete submission URL when viewing a submission

jrockowitz’s picture

jrockowitz commented
Status: Postponed (maintainer needs more info) » Closed (cannot reproduce)
loopy1492’s picture

loopy1492 commented
StatusFileSize
new 3215887-7.patch1.07 KB

Uploading a new patch which should theoretically apply with the new version.