This module currently exposes the callback at uc_termsofservice/node/autocomplete which doesn't enforce the "administer nodes" permissions by making sure that nodes are published. This is OK to discuss here because this module doesn't have a stable release yet.

This patch checks for this permission and adds n.status = 1 where relevant, and also shows a note to site administrators that the ToS node will be displayed regardless of node access permissions.

CommentFileSizeAuthor
uc_tos_node_access.patch1.34 KBezra-g

Comments

pcambra’s picture

pcambra
he/him
Primary language Spanish
commented
Status: Needs review » Fixed

I've applied this patch, but the code was taken from Panels module so maybe you should check it there too.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.