Closed (works as designed)
Project:
User Points
Version:
6.x-1.x-dev
Component:
Code: userpoints_basic
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
2 Feb 2011 at 14:21 UTC
Updated:
14 Mar 2011 at 20:52 UTC
Sorry if I am repeating some existing issue. I tried searching, but I can't find exactly what I need.
The page http://help.sander.su/myuserpoints/NUMBER
Who should be able to access it?
I thought that anybody with USERPOINTS_PERM_VIEW permission.
But currenty it's not like that - one needs USERPOINTS_PERM_ADMIN:
I am using the latest dev.
function userpoints_list_my_userpoints() {
$overall_total = 0;
$unapproved_total = 0;
$approved_total = 0;
global $user;
// User which are displaying points for
$uid = (int)arg(1);
if ($uid) {
if ($uid != $user->uid && !user_access(USERPOINTS_PERM_ADMIN)) {
// If not the same as logged in user
drupal_access_denied();
return;
}
}
...
...
}
Comments
Comment #1
berdirYes, that is correct.
The view permission allows to view the amount of points another user has but not the exact transactions.
So I am closing this *bug report* as works as designed, but...
- Feel free to open a feature request for an additional permission that would allow to view transactions of other users
- The D7 version has fine-grained add/edit/moderate permissions, users with edit permission are allowed to view transactions too.
Comment #2
quotesbro commented> The view permission allows to view the amount of points another user
As I see, users with view permission can't view the amount of other users' points in their profiles.
I'm telling about /user/$uid pages, not /myuserpoints/$uid.
Comment #3
berdirThen this issue is unrelated to that, I suggest you create a new support request, it gets confusing otherwise :)
I'm rather sure that it works, but I'll check again.