Flexiblock module v.1.8 doesn't check permissions when accessing by direct link, i.e. "admin/block/configure/block/5", not from menu.
Therefore, any user (even anonymous) can change block properties.

Comments

vitamin-1’s picture

vitamin-1 commented

Sorry, my fault.

I assigned incorrect permissions in menu module.
Please, delete this thread.

Thox’s picture

Thox commented
Status: Active » Closed (fixed)