If I create a node and make it accessible only to users in an 'admin' role, anonymous users cannot normally see the node, which is what should happen. However, if the statistics is turned on, any user can view nodes that should be private if they are in the most popular list.

Comments

Uwe Hermann’s picture

Uwe Hermann CreditAttribution: Uwe Hermann commented
ankur’s picture

ankur CreditAttribution: ankur commented

Refreshed for 4.5 -> 4.6 port. Issue will be investigated.

-Ankur

ankur’s picture

ankur CreditAttribution: ankur commented

I investigated the problem and it is actually a bug in the statistics module.

In fact, to fix this issue, you will have to directly apply the patch to a 4.6 version of Drupal.

In anycase, the patch wasn't recently submitted and, as of this comment, hasn't been committed to HEAD yet.

You can take a look at the fix at

http://drupal.org/node/20391

-Ankur