Issue: Users with 'administer user' permission are not able to edit others addresses. Currently, only the authoring user or admin (uid: 1) can view/edit/delete addresses.

Line 43 of addresses_user.module needs to be changed.

41  function _addresses_user_access($account) {
42    global $user;
43      - if (($account->uid == $user->uid || $user->uid == 1)
43      + if (($account->uid == $user->uid || user_access('administer user'))

Comments

sean3z’s picture

sean3z commented

Correction: user_accesss() should read 'administer users'. Sorry for typo lol
43 if (($account->uid == $user->uid || user_access('administer users'))

AlexisWilke’s picture

AlexisWilke commented
Status: Needs work » Needs review

sean3z,

Would you be okay with using an addresses specific permission instead of using the system 'administer users' permission?

  ... user_access('addresses edit any address') ...

Thank you.
Alexis

sean3z’s picture

sean3z commented

For my project's needs, I prefer the 'administer users' permission. Makes permission management easier IMO.

AlexisWilke’s picture

AlexisWilke commented

Commit:

http://drupalcode.org/project/addresses.git/commit/834657b

Thank you.
Alexis

AlexisWilke’s picture

AlexisWilke commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.