User who has permission to edit node type, but not 'create blocks for nodes' will overwrite block settings with defaults
jhedstrom - June 17, 2008 - 19:46
| Project: | Node As Block |
| Version: | 5.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed |
Description
If a user has the permission to edit the content type, but not fiddle with the block settings, things like visibility are returned to their default values. The attached patch, which will have incorrect line numbers as it is patched against the D6 port (#254339), adds a permission check to the hook_nodeapi update/insert op to prevent this.
| Attachment | Size |
|---|---|
| nodeasblock.module.patch | 3.1 KB |
#1
Could you please provide a patch for the 5.x branch ?
#2
Here is the patch against the 5.x branch
#3
Committed to 5.x branch and HEAD. Good catch! Thanks jhedstrom.
#4
Automatically closed -- issue fixed for two weeks with no activity.