Closed (won't fix)
Project:
Drupal core
Version:
6.14
Component:
user system
Priority:
Normal
Category:
Support request
Assigned:
Unassigned
Reporter:
Created:
13 Oct 2009 at 12:20 UTC
Updated:
2 Jan 2014 at 19:06 UTC
Jump to comment: Most recent
Comments
Comment #1
j2r commentedComment #2
dddave commentedDon't do that or you basically hand your site over to any anonymous user out there. "Administer..." permissions should never ever be granted to anonymous users!
Also: http://drupal.org/node/53659
Comment #3
dddave commentedUnless someone can point to a module which provides this feature this is a won't fix.
Comment #4
j2r commentedI give access to anonymous user for "administer site configuration" and "select different theme" , It is allowing anonymous user to view the theme setting , when i try to open some other pages like /admin , "/admin/user/permissions" it is showing access denied
may be i am wrong so can you please link one or two pages which is viewable to anonymous user after giving above two permission.
Comment #5
dddave commentedAdminister site configuration is the least harmful of the "administer" permissions in core. Most of the others allow for a real take-over, administer site configuration "only" allows the access during maintenance mode AND setting a site back into online mode. Do you really want to grant anonymous user the permission to do that? You could use the secure site module to prevent this but without other measures you put your site in danger.