Updated: Comment #N

Problem/Motivation

The default entity list (without views) for editors (admin/content/blocks) does not check access before rendering the operation links.

Proposed resolution

Add access check. Similar to views_handler_field_bean_operations, views_handler_field_bean_operations_edit etc.

Remaining tasks

Tests?

User interface changes

-

API changes

-

CommentFileSizeAuthor
bean-access-in-default-bean-overview.patch1.15 KBwebflo

Comments

indytechcook’s picture

indytechcook commented
Priority: Normal » Critical
Status: Needs review » Fixed

Thanks. I consider this critical. Fix is in. And yes. Tests would be nice but we currently don't have any access based tests.

https://drupal.org/commitlog/commit/22232/e20f4e64fffb5e55ae3b236fed0a8e...

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.