Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
26 Aug 2014 at 14:38 UTC
Updated:
8 Feb 2015 at 22:34 UTC
Jump to comment: Most recent
Comments
Comment #1
PA robot commentedProject 1: https://www.drupal.org/node/2327911
Project 2: https://www.drupal.org/node/2131947
As successful completion of the project application process results in the applicant being granted the 'Create Full Projects' permission, there is no need to take multiple applications through the process. Once the first application has been successfully approved, then the applicant can promote other projects without review. Because of this, posting multiple applications is not necessary, and results in additional workload for reviewers ... which in turn results in longer wait times for everyone in the queue. With this in mind, your secondary applications have been marked as 'closed(duplicate)', with only one application left open (chosen at random).
If you prefer that we proceed through this review process with a different application than the one which was left open, then feel free to close the 'open' application as a duplicate, and re-open one of the project applications which had been closed.
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #2
PA robot commentedWe are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and put yourself on the high priority list, then we will take a look at your project right away :-)
Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #3
IcreonGlobal commentedDrupal coder module has reported one issue in your module.
administrative_help.install
severity: normal
Line -1: @file block missing
It should be something like below..
/**
* @file
* administrative_help module install/schema hooks.
*/
Thanks
Comment #4
mxr576Project application checklist
The project page link is missing.
Moreover, you should also add this Pareview link to your applications.
Pareview Result
No warning, no errors. This module is really simple... although you should consider @IcreonGlobal comment. @file blocks missing from your files header.
Manual test
Module works fine for me.
Comment #5
Richir Outreach commentedComment #6
Richir Outreach commentedThanks guys!
Added the information to the first post and added the @file blocks to the code.
Comment #7
pushpinderchauhan commentedComment #8
darol100 commentedManual Review
If added, please don't remove the security tag, we keep that for statistics and to show examples of security problems.
This review uses the Project Application Review Template.
Comment #9
veso_83 commentedHi Nicole Benes,
I’ve tested your module manually and reviewed your code, I can say that this is small but nice module, and your module is the first one with no warnings or notifications from those I’ve checked, everything is according to the drupal codding standards.
Good luck.
Comment #10
gaurav.pahuja commentedJust want to understand the usage of 'hook_node_access'.
I think this will be automatically taken care when you set permissions from admin screen.
Comment #11
Richir Outreach commentedI don't believe without using another module that you can easily restrict viewing content by role, so that's why I've got the hook_node_access call in there. If I've just been overlooking something in Drupal that lets you control views, let me know!
Thanks everyone else who looked into this. If there's anything else I can fix let me know!
Comment #12
stitchzdotnet commentedHi Nicole
Your module looks straight forward, with clean coding, well commented, and Pareview isn't showing any errors.
Looks good.
Comment #13
davidam commented@darol100: I understand that you say 3rd party code is No, you refer that the module is not using 3rd party code, then the module could go to "Reviewed and testing by the community" Is'n it?
Comment #14
darol100 commented@daviam,
Let me review the module one more time to see if ready for RTBC.
Comment #15
darol100 commented@Nicole Benes
You should consider implementing hook_help even if the same information from README file.
And example of the Hook_help been read from READ ME file.
Site builders often use hook_help as their resource of information and also this a best practice for writing a module.
After this I believe the module is ready to be RTBC.
Comment #16
Richir Outreach commentedThanks, I'll add that in and resubmit!
Comment #17
Richir Outreach commentedAdded in hook_help from darol100.
Comment #18
darol100 commentedI will check it out tonight....
Comment #19
Richir Outreach commentedJust bumping this to see if there's anything else that needs to be done!
Comment #20
darol100 commentedadministrative_help.install
There is a typo on line 10
It should be
Comment #21
darol100 commentedComment #22
klausiTypos are not application blockers, anything else that you found or should this be RTBC instead?
Comment #23
darol100 commented@klausi this should be RTBC instead.
I check all the code & and the module seems to be working fine.
Comment #24
Richir Outreach commentedAccording to the docs I just need a Git Admin to review this, then I should be all set? So no action needed until then? Thanks for all the reviews on this, I know you guys are volunteers and I really appreciate taking the time out to look over my project!
Comment #25
darol100 commentedYes,
@Nicole Benes, now you need to wait until someone from the Projects administration will look into your project and check that you do not have anything wrong.
Thank you for your contribution.
Comment #26
Richir Outreach commentedJust thought I'd give this a nudge since it's been a few months and nothing has happened.
Comment #27
klausiWe are currently quite busy with all the project applications and I can only review projects with a review bonus. Please help me reviewing and I'll take a look at your project right away :-)
Comment #28
pushpinderchauhan commentedAutomated Review
Best practice issues identified by pareview.sh / drupalcs / coder. None
Review of the 7.x-1.x branch (commit d94eb3a):
This automated report was generated with PAReview.sh, your friendly project application review script. You can also use the online version to check your project. You have to get a review bonus to get a review from me.
Manual Review
Simple module and docs also looks good.
Nothing major jumped out at me when I read `git diff d94eb3a..`
I am not seeing any blocking issues. Assigning to mpdonadio for a final look.
Comment #29
mpdonadio(*) administrative_help_contents(), the db_select() needs an `->addTag('node_access')` to allow site owners to further restrict access to particular notes. This falls under an access bypass security issue. In general, all db_select() agains the {node} table need `->addTag('node_access')`.
I will approve this application once that is fixed.
Comment #30
Richir Outreach commentedThanks for the look mpdonadio!
I've added in the node_access check into the db_select query. Let me know if you notice anything else!
Comment #31
mpdonadioRTBC is set by others, when you are done with something, set to Needs Review. I'll look at is as soon as I can.
Comment #32
mpdonadioRead `git diff d94eb3a` and see the change. My blocker is gone. Did quick second look at the module, and didn't see anything else.
Comment #33
mpdonadioAn admin had this a RTBC before I found a blocker, so...
Thanks for your contribution, Nicole Benes!
I updated your account so you can promote this to a full project and also create new projects as either a sandbox or a "full" project.
Here are some recommended readings to help with excellent maintainership:
You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and stay involved!
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
Thanks to the dedicated reviewer(s) as well.