According to the webform settings you can select a role that can submit the form, but it doesn't appear to check this on submission.

How to reproduce
Start filling out a form as a logged in user. Delete your Drupal cookies (or, let the cookie time out) and then press submit. The form will submit but from the user Anonymous (not verified) and in our case, forward to the Thank You page/message.

CommentFileSizeAuthor
#2 webform-roles_check-1840958-2.patch973 bytessidharthap

Comments

sidharthap’s picture

sidharthap
Primary language English
commented

Same issue here. I am working on it and soon i will upload the patch.

sidharthap’s picture

sidharthap
Primary language English
commented
StatusFileSize
new webform-roles_check-1840958-2.patch973 bytes

here is the patch file.

quicksketch’s picture

quicksketch
he/him
commented
Issue summary: View changes
Priority: Major » Normal
Status: Active » Needs review

Thanks. This issue is also the same as #1680952: Submission role access isn't re-checked when validating a form, but when that problem was fixed it was apparently only committed to the 4.x version of the module. You could upgrade to the 4.x version if you're needing this functionality immediately.

danchadwick’s picture

danchadwick commented
Status: Needs review » Closed (won't fix)

Version 7.x-3.x is getting critical fixes only. Please upgrade to 7.x-4.x if possible.