og_subgroups 5.x-3.0
| Download | Size | md5 hash |
|---|---|---|
| og_subgroups-5.x-3.0.tar.gz | 13.47 KB | 864dd3ffab2edf1ebcf0e9a582d0d967 |
This version fixes the node_access bypass security issue mentioned at #190837: User should not be able set a parent for non-subscribed group
Thanks to Amitaibu for pointing this out! The fix for this also resulted in a new feature. See below.
Bug Fixes:
#223481: Repeated use of arg() function in og_subgroups_menu() is inefficient - replace with single call and a variable.
#218747: Parent not Saved when Post Propagation Direction set to None - Thanks to torelad for the initial troubleshooting!
#221636: Untranslatable string Thanks to nath for reporting this issue.
New Feature:
The code that generates the og_subgroups parents select box has been replaced with code that closely follows the current (5.x-5.4) Audience form element used in Organic Groups. The og_subgroups parents form element now correctly accounts for appropriate parent types when generating this form element. Please see the patch at #190837: User should not be able set a parent for non-subscribed group for details on how this change was achieved.
This was made possible in part by details mentioned in the release notes for that version of Organic Groups http://drupal.org/node/219793/
**This package does not include the necessary .info file. Please see later versions of this module for a working package.**
