Problem/Motivation

Hello there. Upon running the tests in the Security Review module, it reported that views.view.profiles doesn't have any access restriction set. As far as I can tell, this view is only used behind an access check, so it's not likely a security issue but adding a permission would remove this false positive for other users of the Security Review module.

Steps to reproduce

Install Profile module, check views.view.profiles

Proposed resolution

Restrict access to the view using a permission such as view any profile

Remaining tasks

See above.

User interface changes

None probably?

API changes

None?

Data model changes

Probably none?

Comments

Ambient.Impact created an issue.