Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Downloads
Download nodeaccess_userreference-6.x-3.5.tar.gztar.gz
10.39 KB
MD5: 6fc41b30dde63bac5396b1b247d0c0e0
SHA-1: 61ff087bc4d75ee0fbc33d287b7a29803a450151
SHA-256: d54ee82711161a5118e3d6bd5f76fbef4b4a8c2f86c9c19923d2019064834348
Download nodeaccess_userreference-6.x-3.5.zipzip
11.67 KB
MD5: dd3488cf4d73bf66907882d7f1f70304
SHA-1: bbc9f9c908cdda8be64fed8191afcedcda904212
SHA-256: e69a958d8c6cc61a90f797df7d750cf897c36077f53ff901264779ece947df35
Release notes
When an author has created content containing a user reference field (with author update/delete grants enabled) and the author's user account is later deleted, content created by them can be edited by anonymous users.
This release fixes this issue.
SA-CONTRIB-2013-049 - Node access user reference - Access Bypass