To reproduce:
1. Create a vocabulary
2. Add an 'Image' field with private storage
3. Create a term with an image
4. View the term. The image does not show because of a 403.
I tried the same for other entities, such as nodes, but here the same problem does not happen because node.module implements hook_file_download_access which explicitly allows access to the file in the field. The same happens for user_file_download_access.
It appears to me that the same pattern should (have) be(en) implemented for taxonomy.module.
| Comment | File | Size | Author |
|---|---|---|---|
| #3 | taxonomy-file_download_implementation-1844618-1.patch | 654 bytes | bvanmeurs |
| #1 | taxonomy-file_download_implementation-1844618-1.patch | 652 bytes | bvanmeurs |
Comments
Comment #1
bvanmeurs commentedComment #2
bvanmeurs commentedComment #3
bvanmeurs commentedUsed the wrong permission (was access nodes, must be access content). Note that this is the permission used to (dis)allow access to the taxonomy term in the menu item in taxonomy_menu.
Comment #4
bvanmeurs commentedFollow-up please?
Comment #5
dazz commentedHad the same problem, the patch in #3 fixed it for me.
Comment #6
shrop commentedI actually had this exact issue today.
Should this be marked fixed if it hasn't been committed to 7.x-dev?
Comment #7
bvanmeurs commentedThanks for your comments.
This hasn't been committed to dev. But as this issue probably also exists in Drupal 8, I will move it to drupal 8 and add a backport to 7 tag. Maybe that way it will get noticed.
Comment #8
bvanmeurs commented.
Comment #9
berdirSee #1327224: Access denied to taxonomy term image.
Comment #9.0
berdirtypo
Comment #10
off commentedSame problem