Mass Contact accessible by users with no permission ?
darumaki - August 6, 2008 - 10:21
| Project: | Mass Contact |
| Version: | 6.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | postponed (maintainer needs more info) |
Jump to:
Description
I notice users who shouldn't have access can see the mass contact when creating content even though they don't have access, is this a bug ?
#1
This should not be happening. Are you still seeing this behavior?
#2
I've tested this. Neither anonymous users nor authenticated users without the corresponding right could add a mass contact message. I use the latest dev release.
#3
I checked using the latest stable release for anonymous users and didn't find a problem either. Checked all of the admin pages as well as the /mass_connect page (which really needs more links to it from the menu or something).