og_subgroups 5.x-3.0

ezra-g - February 25, 2008 - 22:53
Download Size md5 hash
og_subgroups-5.x-3.0.tar.gz 13.47 KB 864dd3ffab2edf1ebcf0e9a582d0d967
Official release from CVS tag: DRUPAL-5--3-0
Last updated: February 25, 2008 - 22:55

This version fixes the node_access bypass security issue mentioned at #190837: User should not be able set a parent for non-subscribed group
Thanks to Amitaibu for pointing this out! The fix for this also resulted in a new feature. See below.

Bug Fixes:
#223481: Repeated use of arg() function in og_subgroups_menu() is inefficient - replace with single call and a variable.
#218747: Parent not Saved when Post Propagation Direction set to None - Thanks to torelad for the initial troubleshooting!
#221636: Untranslatable string Thanks to nath for reporting this issue.
New Feature:
The code that generates the og_subgroups parents select box has been replaced with code that closely follows the current (5.x-5.4) Audience form element used in Organic Groups. The og_subgroups parents form element now correctly accounts for appropriate parent types when generating this form element. Please see the patch at #190837: User should not be able set a parent for non-subscribed group for details on how this change was achieved.

This was made possible in part by details mentioned in the release notes for that version of Organic Groups http://drupal.org/node/219793/

**This package does not include the necessary .info file. Please see later versions of this module for a working package.**

 
 

Drupal is a registered trademark of Dries Buytaert.