Closed (fixed)
Project:
Content Profile
Version:
6.x-1.0-beta3
Component:
Base module
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
3 Mar 2009 at 06:02 UTC
Updated:
21 Apr 2009 at 11:30 UTC
I'm new to content_profile so this may or may not be a bug.
Steps to recreate:
User 2 tries to edit user 3's profile node by visiting example.com/user/3/profile/profile
Observed Behavior:
User 2 is redirected to the node edit page for his own profile node.
Expected Behavior:
Access denied message.
This seems to be even more confusing for users when you enable "Show a tab at the user's page" since then there is a tab that links to example.com/user/3/profile/profile
Attached is a patch that modifies the profile/profile callback function so that it checks to make sure the user is trying to edit their own profile node or the user has "administer node" permissions.
| Comment | File | Size | Author |
|---|---|---|---|
| profile_page_access.patch | 764 bytes | jcruz |
Comments
Comment #1
andreiashu commented@jcruz: I just applied the patch and it works. Thanks !
RTBC in my opinion.
Comment #2
fagoindeed, thanks. I've added a comment to it and committed it.