There's no permission for the settings page (admin/config/media/media_browser_plus_settings), 'administer files' is used, but I find it kind of odd that it's using this permission for it's settings page.

The media module uses the same permission, but there's is an issue and a patch for this.
Issue: http://drupal.org/node/1857218

I'm working of version 7.x-2.x-dev due to the use older media module (unstable-3) version we are using and will add a patch for this permission in a sec. Maybe it could be used for later versions.

Cheers

CommentFileSizeAuthor
#1 media_browser_plus_permission-1965310-2.patch1.05 KBericclaeren

Comments

ericclaeren’s picture

ericclaeren commented
StatusFileSize
new media_browser_plus_permission-1965310-2.patch1.05 KB

The patch.

anybody’s picture

anybody
Primary language German
Location Porta Westfalica
commented
Category: Feature request » Bug report
Priority: Normal » Major
Issue summary: View changes
Status: Active » Reviewed & tested by the community

The current implementation opens security holes for users who should not administer a module, so I'll set up the priority. The patch is tested and RTBC.

Please create a new stable release.

anybody’s picture

anybody
Primary language German
Location Porta Westfalica
commented
Status: Reviewed & tested by the community » Closed (duplicate)

This solution is easier and better. It prevents an unnecessary additional permission:
#2223841: Add separate permission to use vs administer settings