Problem/Motivation

The search return the files that user haven't access

Steps to reproduce

  1. Go to admin/config/media/imce
  2. Configure the profile to only have permissions to the "test" folder
  3. Login with user that have this profile
  4. Go to imce/public
  5. Search by some file that is not in "test" folder
  6. The Search return the file list without access check

Issue fork imce_search_2-3566431

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

loon created an issue. See original summary.

loon opened merge request !3

loon’s picture

loon commented
Assigned: loon » Unassigned
Status: Active » Needs review

Created MR with fix.

dhruv.mittal’s picture

dhruv.mittal commented

Reviewing it

dhruv.mittal’s picture

dhruv.mittal commented
Status: Needs review » Needs work
Issue tags: +Needs reroll

Needs rabase
so moving it to needs work
Thanks

loon’s picture

loon commented
Status: Needs work » Needs review
dhruv.mittal’s picture

dhruv.mittal commented
Status: Needs review » Reviewed & tested by the community

Looks good
Moving to RTBC

  • mirakolous committed e01fc90d on 1.0.x 
    Issue #3566431, #3566472, #3520125: Enforce IMCE access on search and...
mirakolous’s picture

mirakolous commented
Status: Reviewed & tested by the community » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.