If I create a node and make it accessible only to users in an 'admin' role, anonymous users cannot normally see the node, which is what should happen. However, if the statistics is turned on, any user can view nodes that should be private if they are in the most popular list.

Comments

Uwe Hermann’s picture

Uwe Hermann commented
ankur’s picture

ankur commented

Refreshed for 4.5 -> 4.6 port. Issue will be investigated.

-Ankur

ankur’s picture

ankur commented

I investigated the problem and it is actually a bug in the statistics module.

In fact, to fix this issue, you will have to directly apply the patch to a 4.6 version of Drupal.

In anycase, the patch wasn't recently submitted and, as of this comment, hasn't been committed to HEAD yet.

You can take a look at the fix at

http://drupal.org/node/20391

-Ankur