I just noticed then when using this a little bit the todo lists are available to anyone if they grab the url regardless if they are logged in or not.
I just grabbed the iframe url pasted it into a browser that I was not logged into and was able to see all of my todo items. I know this adds a other layer to this module but it would be really awesome to have the ability to lock this down.
Again, I love this module.
Comments
Comment #1
fizk commentedFixed! :)
Comment #2
fizk commentedTo view the todo list, the user will need the ability to view the node.
To change the todo list, the user will need the ability to update the node.
This should be compatible with content access.