There are no permission checks used for display of the weblink.module blocks. The "access content" permission should be checked before displaying the blocks.

CommentFileSizeAuthor
#3 weblink_6.patch642 bytesjunyor
#1 weblink_5.patch634 bytesjunyor

Comments

junyor’s picture

junyor commented
Assigned: Unassigned » junyor
StatusFileSize
new weblink_5.patch634 bytes
mikeryan’s picture

mikeryan
he/him
Primary language English
Location Pittsfield, MA, USA
commented

Isn't "access weblink monitor" the more appropriate permission to check? If not instead of "access content", then in addition to it...

junyor’s picture

junyor commented
StatusFileSize
new weblink_6.patch642 bytes

That is a very good question and I can't for the life of me figure out why I didn't use it. I just did a quick test and it seemed to work fine. Here's a new patch.

junyor’s picture

junyor commented
Status: Needs review » Closed (won't fix)

Weblink has been rewritten and I'm not using it anymore, so I don't know if this is a problem. Marking won't fix.