If a role is deleted that had some rights in a forum, then the corresponding record in the {forum_access} table is not removed.

This does not compromise security in any way, but it keeps useless data in the {forum_access} and {node_access} tables. Unfortunately, core doesn't provide a hook for role removal, so I will probably implement a check in hook_cron.

Comments

salvis’s picture

salvis
he/his
commented
Version: 6.x-1.x-dev » 5.x-1.10
Status: Active » Fixed

No need for hook_cron, just catch the [Delete role] submit.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.