Posted by mfer on March 16, 2008 at 9:25pm
| Project: | Asset |
| Version: | 5.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | critical |
| Assigned: | wmostrey |
| Status: | closed (fixed) |
Issue Summary
_asset_page_match() doesn't check for user permission on 'create assets' or any other permissions. So, it always displays the link. For everyone...
Patch to follow shortly
Comments
#1
A patch to _asset_page_match() that solves this. Not sure if this permissions check fits with the permissions scheme of the module though.
#2
I also added the "administer assets" permission. Thanks for pointing this out, will be committed to dev tonight.
#3
Committed to dev, thanks a lot Matt!
#4
Automatically closed -- issue fixed for two weeks with no activity.