there is no permission option provided to control who can access the module configure page
currently anyone who can access the administration page can access the module configure page
which is not secure enough, hope that a permission check can be added for that

Comments

flevour’s picture

flevour commented

Thanks for your report. My dev machine is currently undergoing some technical mantainance. I'll be back on testing/discussing the issue in a week or so.
Francesco

flevour’s picture

flevour commented
Assigned: Unassigned » flevour
Status: Active » Fixed

Nice suggestion. I implemented your suggestion in dev. Sorry for the delayed response again.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.

flevour’s picture

flevour commented
Status: Closed (fixed) » Active

I was notified via pm I probably forgot to commit. Reopening issue.

flevour’s picture

flevour commented
Status: Active » Fixed

Committed and released a 1.0 version.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.

dafeder’s picture

dafeder
he/him
Location Philadelphia, PA
commented
Status: Closed (fixed) » Active

I'm using version 6.x-1.2 and still don't see this permission? Or is it still only in dev?

flevour’s picture

flevour commented

Dafeder,
thanks for your report. I made some mistakes with CVS after the 1.0 release, so this and other changes got virtually lost.
I recovered the changes and committed, releasing a 1.3 version now.
Thanks,
Francesco

flevour’s picture

flevour commented
Status: Active » Fixed

Marking as fixed.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.