BUG: Users without "access comments" permission can view comments via this module.
Kimbecca - February 19, 2008 - 12:29
| Project: | Comments Page |
| Version: | 5.x-1.0 |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Kimbecca |
| Status: | needs review |
Description
I believe the attached patch fixes this issue. Users without the "access comments" permission should be directed to drupal's access denied page rather than having this module serve up comments they should not be able to see.
The menu items will also not be present if the viewing user does not have the "access comments" permission.
This patch is very small and works fine as near as I can tell.
| Attachment | Size |
|---|---|
| comments_page.module.patch | 1.47 KB |