The 5.x-1.1 security update has broken the Bypass Log-in Filter. The terminology is a bit confusing, but one of the options used to let me put the log-in dialog only on the listed pages. Since 5.x-1.1 the log-in dialog comes up on every page.

Comments

junyor’s picture

Status: Active » Fixed

Yes, it was broken due to the security fix. The problem has been fixed on the DRUPAL-5 branch.

salvis’s picture

Thanks.

Since you're doing some cleanup work you could maybe also clarify the texts in this fieldset. Are we activating the deactivation (bypass) on all but the listed pages in order to get the dialog to appear on those pages, or what?

How about
-- show the login dialog on the listed pages only
-- show the login dialog on all but the listed pages

junyor’s picture

Good idea. I went ahead and clarified many of the settings, including the bypass filter settings, on the DRUPAL-5 branch. Please let me know what you think of the changes.

salvis’s picture

Yes, now it's perfectly clear and useful. Thanks!

Does it still make sense to call the fieldset "Bypass login"?

junyor’s picture

Yes, I think so.

Anonymous’s picture

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.