I propose to change the structure of the permissions for this module as follows:

- That access to the existing pages at /admin/reports/enabled_modules/* be now controlled by the permission "access administration pages". The reasoning behind this is not that the pages display any content that is sensitive, but because the information displayed in this form is really only useful to those administering the site.

- Access to the new page at /enabled_modules be controlled by the previous permission "view enabled modules". This page will display less information than the admin pages, so it is safe for those who already had the permission.

Unless there are objections, I'll do a patch for the above change and commit.

CommentFileSizeAuthor
#1 enabled_modules--764346-1.patch1.47 KBjuliangb

Comments

juliangb’s picture

juliangb commented
Status: Active » Fixed
StatusFileSize
new enabled_modules--764346-1.patch1.47 KB

Committed this patch.

juliangb’s picture

juliangb commented

NB, used permission "access site reports" in the end for the first point, as it seemed more appropriate.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.