Closed (fixed)
Project:
Verify Email
Version:
1.1.x-dev
Component:
Code
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
13 Nov 2025 at 01:45 UTC
Updated:
27 Nov 2025 at 10:29 UTC
Jump to comment: Most recent
The "Access verification form" permission has been created for each verify email form, but does not currently limit access.
Create a verify email form. Check permissions page and confirm no access has been granted. Visit verify email form as anonymous user, and confirm form is shown.
The form should deny access to users without the "Access verification form" permission for that form type.
/src/routing/VerifyEmailRoutes, for both routes created per entity, change '_access' => 'TRUE' to '_permission' => "access verify $entity_id"VerifyEmailRoutingTest:
setUp, create a user with "access verify verify_email_test" and assign to "accessUser" property.testVerifyEmailRoute, assert access denied (403) when accessing "/verify-email-form" as anonymous user, then log in as "accessUser", and load "/verify-email-form", and confirm success (200).testInvalidEmail, insert login as "accessUser".testVerifyEmailForm, insert login as "accessUser" at start.Permissions will need to be set to allow access to verification forms.
None.
None.
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #2
lostcarpark commentedComment #3
ritarshi_chakraborty commentedWorking on it.
Comment #5
ritarshi_chakraborty commentedI have tested the changes locally and it's working perfectly for me.
Comment #6
lostcarpark commentedI love how simple this change turned out to be, while improving the flexibility of the module quite a lot. Thank you for working on it.
I have reviewed the change and tested locally, and I'm happy that it's working correctly.
Moving to RTBC.
Comment #7
lostcarpark commentedComment #9
lostcarpark commentedThanks for working on this @ritarshi_chakraborty!
Successfully merged, contribution credit awarded, and moved to fixed.