Menu item node/add/wishlist shows up while no access to creation of wishlist
| Project: | Wishlist Module |
| Version: | 6.x-2.2 |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | active |
I added a menu item to the navigation menu. A registered user without any access to the wishlist module sees the menu item "Add to wishlist" (/node/add/wishlist). Clicking on the link shows the "No access" error page.
I would expect that the "add to wishlist" menu item would be hidden from the menu.
The "/wishlist" menu item that I created behaves like I expect: it doesn't show up for the registered user without wishlist access, but it does show up for registered users with wishlist access.
The "/node/add" drupal page only shows the "page" possibility (that is the only thing the registered user without wishlist access is allowed to do).
I did look at the php wishlist.module coding and found out that the hook_access api has changed from D5 to D6 (param $account was added) and that the wishlist.module uses only two params, but I don't think that is the cause of this issue.
Carl
