Install

Works with Drupal: 8.x

Using Composer to manage Drupal site dependencies

Alternative installation files

Download permissions_by_term-8.x-2.11.tar.gztar.gz 665.17 KB
MD5: 38757631f5c028c2b99fa4bb1a11af95
SHA-1: b31eb799c4d98652ff4e35b24eaeb97fccbd1da6
SHA-256: 19ad90d039f0f64cd591af7ffb2e736321c85da03e9d33cefd5d8f278bbf759a
Download permissions_by_term-8.x-2.11.zipzip 716.82 KB
MD5: 788431dcde10c20936effb962f3809ca
SHA-1: 16a1e261d762dd56875e7d434f45bddf6a25a67b
SHA-256: be21bfd677427bbdba98b000e8c070f276ea65bf37db1314b9ab5e2c6c47c611
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Release notes

  • Added a test to check if unpublished nodes remain inaccessible to anonymous users
  • Before deciding on access permissions, check if an entity is even using restricted terms, otherwise just return neutral

Permissions by Term - Moderately critical - Access bypass - SA-CONTRIB-2019-068

Created by: Peter Majmesku
Created on: 25 Sep 2019 at 07:27 UTC
Last updated: 26 Sep 2019 at 14:18 UTC
Git tag 8.x-2.11
Security update
Bug fixes

Other releases