Users without 'delete wiki content' permission can delete wiki pages
augustd - January 4, 2007 - 01:25
| Project: | Liquid Wiki Engine Project |
| Version: | 4.7.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | critical |
| Assigned: | Unassigned |
| Status: | closed |
Jump to:
Description
Users without the 'delete wiki content' permission can still see the delete tab and delete wiki pages.
Attached patch exchanges calls to node_access() with user_access() and appears to work.
| Attachment | Size |
|---|---|
| liquid.module.patch | 580 bytes |
#1
This was actually fixed long ago in the original code base... but it was (for some unexplained reason) never commited. I'm sorry!
#2