Download & Extend

Users without 'delete wiki content' permission can delete wiki pages

Project:Liquid Wiki Engine Project
Version:4.7.x-1.x-dev
Component:Code
Category:bug report
Priority:critical
Assigned:Unassigned
Status:closed (fixed)

Issue Summary

Users without the 'delete wiki content' permission can still see the delete tab and delete wiki pages.

Attached patch exchanges calls to node_access() with user_access() and appears to work.

AttachmentSize
liquid.module.patch580 bytes

Comments

#1

Status:needs review» fixed

This was actually fixed long ago in the original code base... but it was (for some unexplained reason) never commited. I'm sorry!

#2

Status:fixed» closed (fixed)