overviewTableRow() doesn't check entity_access(), so operation links such as 'delete' show even if the user doesn't have the necessary access.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | entity-check_operation_access-1804502-1.patch | 1.28 KB | ronino |
overviewTableRow() doesn't check entity_access(), so operation links such as 'delete' show even if the user doesn't have the necessary access.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | entity-check_operation_access-1804502-1.patch | 1.28 KB | ronino |
Comments
Comment #1
ronino commentedThe attached patch only adds the edit and delete action links if the user has access to them.