Download & Extend

Webform doesn't check role permissions on submit

Project:Webform
Version:7.x-3.17
Component:Code
Category:bug report
Priority:major
Assigned:Unassigned
Status:active

Issue Summary

According to the webform settings you can select a role that can submit the form, but it doesn't appear to check this on submission.

How to reproduce
Start filling out a form as a logged in user. Delete your Drupal cookies (or, let the cookie time out) and then press submit. The form will submit but from the user Anonymous (not verified) and in our case, forward to the Thank You page/message.

Comments

#1

Same issue here. I am working on it and soon i will upload the patch.

#2

here is the patch file.

AttachmentSize
webform-roles_check-1840958-2.patch 973 bytes
nobody click here