When logged in as a user who has permissions to 'access administration pages' the following menu items show up even if the user is lacking the permissions:

User management (still shows even if role has no access to user profiles or admin)
Run updates (should only show to UID 1)

CommentFileSizeAuthor
#2 admin_menu-DRUPAL-6--1.access.patch1.44 KBsun

Comments

pwolanin’s picture

pwolanin commented
Status: Active » Postponed (maintainer needs more info)

Please provide more details about what other modules are active, etc. Also, please update to 6.x-1.1 to see if that resolves the bug.

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Version: 6.x-1.0 » 6.x-1.1
Status: Postponed (maintainer needs more info) » Active
StatusFileSize
new admin_menu-DRUPAL-6--1.access.patch1.44 KB

Confirming.

Attached patch should fix the "Run updates" issue.

However, all top-level links (admin/content, admin/build, admin/settings, ...) appear, regardless of whether they contain any items. That's because system.module registers them as regular menu items, just using the access permission "access administration pages". :-/

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Status: Active » Needs review
sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Status: Needs review » Fixed

Committed that patch.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.