Problem/Motivation
Hello there. Upon running the tests in the Security Review module, it reported that views.view.profiles doesn't have any access restriction set. As far as I can tell, this view is only used behind an access check, so it's not likely a security issue but adding a permission would remove this false positive for other users of the Security Review module.
Steps to reproduce
Install Profile module, check views.view.profiles
Proposed resolution
Restrict access to the view using a permission such as view any profile
Remaining tasks
See above.
User interface changes
None probably?
API changes
None?
Data model changes
Probably none?
Comments