Hello,
Only the twitter module is enabled and the permission "Add authenticated Twitter accounts" is set for authenticated users. What I want is to let each authenticated user to configure his own auth twitter account.
If I sign in as uid = 3 and navigate to /user/3/edit/twitter it gives me the right twitter settings page. There is another auth user with uid = 2 on the system. If I navigate to /user/2/edit/twitter I can access and add authenticated twitter accounts for this user too! I naturally don't have access to /user/2/edit.
I think this is a bug. Any ideas?
Thank you for this great module!
Chris
| Comment | File | Size | Author |
|---|---|---|---|
| #8 | twitter-n1895472-8-6.x-5.x.patch | 1.78 KB | damienmckenna |
| #6 | twitter-n1895472-6-7.x-6.x.patch | 1.82 KB | damienmckenna |
| #5 | twitter-n1895472-5-7.x-5.x.patch | 1.82 KB | damienmckenna |
Comments
Comment #1
Adirael commentedI'm trying to fix the same issue.
Comment #2
Adirael commentedI created a patch that fixed this for me. It adds a 'administer own twitter accounts' permission. It may be good to change a bit the granularity of the permissions but since this is the first time I add a patch here I prefer to keep it as simple as possible .
Comment #3
damienmckennaComment #4
damienmckennaI think this is a better approach - use the permissions already there but only allow you to view someone else's account if you have the 'administer users' permission.
Comment #5
damienmckennaFor 7.x-5.x
Comment #6
damienmckennaFor 7.x-6.x.
Comment #8
damienmckennaForgot to add some code to the 6.x-5.x patch to rebuild the menu cache.
Comment #9
damienmckennaCommitted.
Comment #12
damienmckennaClosed a duplicate: #1344952: Users with twitter global account access should not be able to delete account