Problem/Motivation

The 'Manage dependencies' operation is always shown, even when the user doesn't have access to the page it points to.

Steps to reproduce

Access the node type overview with an user who doesn't have the view conditional fields permission. The 'Manage dependencies' operation is visible, but when clicking the link you get a 403.

Proposed resolution

Check access before adding the entity operation.

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

DieterHolvoet created an issue. See original summary.

dieterholvoet’s picture

Title: Dependencies operation is always shown, even when the user doesn't have access » 'Manage dependencies' operation is always shown, even when the user doesn't have access
Issue summary: View changes

dieterholvoet’s picture

Status: Active » Needs review

heddn made their first commit to this issue’s fork.

  • heddn committed abeae4d9 on 4.x authored by dieterholvoet
    Issue #3451019 by dieterholvoet, heddn: 'Manage dependencies' operation...
heddn’s picture

Status: Needs review » Fixed

Thanks for your contributions.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.