Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
My work on #468136: Nodequeue: Add test cases led me to this issue.
If you pass in a user account to nodequeue_queue_access(), the two user_access() checks are done against the currently logged in user and not the account you wish to check.
See attached patch.
Comment | File | Size | Author |
---|---|---|---|
nodequeue_user_access.patch | 813 bytes | wulff | |
Comments
Comment #1
ezra-g CreditAttribution: ezra-g commentedThanks for posting a patch -- Marking as needs review.
Comment #2
ezra-g CreditAttribution: ezra-g commentedCommitted. Thanks!