I have recently noticed that viewfield shows views even if they have restricted permissions. My website is packed with different modules, so I'm not really sure whether it's viewfield's fault or some combination of different modules.

So, my question is: should viewfield support views access permissions at all? If not, how could I make viewfield views visible only to certain user roles? (Hint: CCK field permissions doesn't work for me either.)

Comments

jerdavis’s picture

jerdavis
Location Minneapolis, MN
commented
Status: Active » Fixed

The short answer is no, it was not doing access checking prior to view execution. I just committed a fix for this. Thanks!

Jer

jerdavis’s picture

jerdavis
Location Minneapolis, MN
commented
Version: 5.x-1.5 » 6.x-1.x-dev

FYI - Committed to HEAD, will be fixed in 6.x

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

J.B-2’s picture

J.B-2 commented
Status: Closed (fixed) » Active

Hi folks, has this been fixed in 6 yet? Still seems to be an issue for me?

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Status: Active » Closed (fixed)

Yes, 6.x uses regular Views API functions to render the view. Of course, Views API functions respect their own access plugin system.