Closed (fixed)
Project:
Drupal core
Version:
8.0.x-dev
Component:
user.module
Priority:
Normal
Category:
Task
Assigned:
Issue tags:
Reporter:
Created:
10 Mar 2013 at 19:35 UTC
Updated:
29 Jul 2014 at 22:01 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #1
duellj commentedFirst pass at converting theme_user_admin_roles to table #type. Currently there doesn't seem to be a way to add attributes to table #type columns, so theme_user_admin_permissions can't be converted until that's fixed.
Comment #2
duellj commentedWaiting on this issue to allow table cell attributes: #1948374: #type 'table' allow attributes on table cells
Comment #3
andypostThis issue could be marked as duplicate of #1872870: Implement a RoleListController and RoleFormController
Roles will get this controllers anyway
Comment #4
duellj commentedThanks anypost, removed theme_user_admin_roles() from the list of conversions. theme_user_admin_permissions() will still need to be converted.
Comment #5
andypostRelated issue #229193: Incremental filter for permissions page
Comment #6
duellj commentedAttached patch converts theme_user_admin_permissions to table #type. There's no interdiff, since it's unrelated to the patch from #1 (which converts the roles table). Also updating title to reflect new scope.
Comment #7
andypostPatch looks ready, needs manual testing for attributes
Is there a way to meka it consistent?
'#attributes' => array('id'=>...)
Comment #8
jibranTagging.
Comment #9
neochief commentedIsn't the #markup stuff should be filtered with at least filter_xss_admin() ? I've tried to create a module with
tag in name and the script was launched on the page with permissions. I know that it's an edge case (if there's an edge for edge cases, that should probably be it), but that's a XSS anyway.Comment #10
andypostHey, this one should be postponed for #1872876: Turn role permission assignments into configuration.
Also should be build on top of FormInterface and provided as route #1971384: [META] Convert page callbacks to controllers
Comment #11
andypost$module should be safe
Better make it a render array.
#theme => #user_permission_description
Role name could be entered within UI so check_plain() needed here because seems checkbox render does not filters it's title
Comment #12
andypostseems role name was not filtered before
Comment #13
jibran#6: 1938938-6-user-tables.patch queued for re-testing.
Comment #15
risse commentedUpdated duelljs' patch on message #6, should apply correctly.
Comment #17
risse commentedThe previous patch had some bad line endings, this one applies ok.
Comment #18
Brandonian commentedPatch looks good to me. User permissions page renders properly, still functional. Marking as reviewed and tested.
Comment #19
alexpottCommitted c874593 and pushed to 8.x. Thanks!
Comment #20.0
(not verified) commentedRemoving theme_user_admin_roles