Download & Extend

Insert Assets link always shows

Project:Asset
Version:5.x-1.x-dev
Component:Code
Category:bug report
Priority:critical
Assigned:wmostrey
Status:closed (fixed)

Issue Summary

_asset_page_match() doesn't check for user permission on 'create assets' or any other permissions. So, it always displays the link. For everyone...

Patch to follow shortly

Comments

#1

Status:active» needs review

A patch to _asset_page_match() that solves this. Not sure if this permissions check fits with the permissions scheme of the module though.

AttachmentSize
asset_235051_1.patch 665 bytes

#2

Assigned to:Anonymous» wmostrey
Status:needs review» reviewed & tested by the community

I also added the "administer assets" permission. Thanks for pointing this out, will be committed to dev tonight.

#3

Status:reviewed & tested by the community» fixed

Committed to dev, thanks a lot Matt!

#4

Status:fixed» closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.

nobody click here