Our API should have the ability to flag an item, on behalf of a user, even if the this user doesn't have permission to use this flag.

CommentFileSizeAuthor
skip_perm_check.diff1.27 KBmooffie

Comments

mooffie’s picture

mooffie commented

The #320276: Respect flag defaults on node/add forms regardless of permission issue describes one use case for this feature.

mooffie’s picture

mooffie commented

Another reason to have this feature: security.

It's ironic, but in not having this feature we may drive some programmers into doing some unsecure things (e.g. switching to the 'admin' account because cron.php runs as anonymous).

quicksketch’s picture

quicksketch
he/him
commented
Status: Needs review » Reviewed & tested by the community

Looks good to me.

mooffie’s picture

mooffie commented
Status: Reviewed & tested by the community » Fixed

Committed.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.