I guess, because the access check is already performed in the menu. singlesignon_admin_settings() would need to be directly invoked via drupal_get_form() to get the contents of this form (without an access check), which probably doesn't happen. Thus, marking as fixed. Thanks, RobRoy!
Comments
Comment #1
wayland76 commentedWhy has the user access check been removed?
Comment #2
wayland76 commented...and, is this related to this change:
http://drupal.org/node/126299
Comment #3
wayland76 commentedWell, I've applied the patch, but retained the user access check. The fix is in HEAD, and should appear within the next 24 hours.
Comment #4
wayland76 commentedNeeds more info
Comment #5
sunI guess, because the access check is already performed in the menu. singlesignon_admin_settings() would need to be directly invoked via drupal_get_form() to get the contents of this form (without an access check), which probably doesn't happen. Thus, marking as fixed. Thanks, RobRoy!
Comment #6
Anonymous (not verified) commentedAutomatically closed -- issue fixed for two weeks with no activity.