Closed (fixed)
Project:
Drupal core
Version:
5.x-dev
Component:
user.module
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
26 Jan 2007 at 17:10 UTC
Updated:
19 Jul 2007 at 13:16 UTC
A user assigned a role with the administer users permission but not the access user profiles will upon submitting the edit form receive an Access denied screen although the changes have been saved. Instead of directing the user to user/uid, which he isn't allowed to see, the User module should direct the user to admin/user.
These are the steps to reproduce the bug:
roleA with the administer users permission only.userA with the role roleA.userA account settings page) and press Submit.
Comments
Comment #1
cburschkaFixed in 5.x; I just tested it. Editing from the admin panel passes ?destination=admin/user/user to the form, causing it to be redirected properly.
Comment #2
(not verified) commented