Posted by deardagny on January 23, 2013 at 10:10pm
2 followers
Jump to:
| Project: | Webform |
| Version: | 7.x-4.0-alpha6 |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | needs work |
Issue Summary
I'm using the [submission:values:foo:nolabel] token on a confirmation page, and found that the value only gets passed if "Access all webform results" permission is granted to anonymous users (it displays fine for admin). The value is included with the actual submission with no trouble.
I may be thinking of it wrong, but it seems as though this should only require permission to access one's own submission? Hopefully I'm not missing anything obvious.
Comments
#1
My mistake. Because of my limited use-case, I failed to realize that there's no reliable way to identify an anonymous submission with an anonymous user (unless related to the session). It was a long day.
#2
The same problem occurs with registered user.
In this case, the token should be available if they have the "Access own webform results", but it is not. The access to ALL results is needed to have the token available.
Is it easy to fix?