I've given a user a limited set of permissions. The menu that shows up when clicking on 'Storm' is correct and only gives the links that the user has permission for, but the dashboard has all available icons and only when you click on each one, does it go to an access denied page.

The Dashboard should remove any icons that the user doesn't have permission for.

Cheers,
Stephanie

CommentFileSizeAuthor
#2 new theme files.zip4.46 KBssherriff
#1 new theme files.zip4.46 KBssherriff

Comments

ssherriff’s picture

Status: Active » Needs review
StatusFileSize
new4.46 KB

Ok, I've attached edited theme.inc files that not only check for a module's existance, but also whether a person has access to that area. I know it would have been better to add this to theme files, etc, but I think this should be in core. I would have done a patch, but for some reason my CVS tool doesn't do patches. I will try to figure out another way of doing a patch, but for now, I've attached the updated files.

If someone else can create a patch, that would be great as well.

Cheers,
Stephanie

ssherriff’s picture

StatusFileSize
new4.46 KB

Sorry, new ones attached, I made a mistake on the storm.theme.inc one.

Magnity’s picture

Status: Needs review » Fixed

Committed, thanks.

(dev from midnight, stable from 1.23)

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.