I use a template with icons for mail, flag, print, etc so a logged out user would never see the "Mail Page" icon but the service is still available if the correct URL is used. Is there a chance of adding "Access Mail" to the access control permissions so that logged out users can't access it in any way. Or is there already another way of doing this?

Comments

jcnventura’s picture

jcnventura
Primary language English
commented
Status: Active » Postponed (maintainer needs more info)

They're all controlled by the 'access print' privilege..

esllou’s picture

esllou commented

Yes, but I thought it would be useful to separate especially Mail from the other two, because allowing someone to view a printable version of a page wouldn't have any negative side effects - allowing people potentially to use the module to send spam mail most certainly does have negative side effects. As it is now, it's "all or nothing" which is a problem for logged out users.

jcnventura’s picture

jcnventura
Primary language English
commented
Status: Postponed (maintainer needs more info) » Fixed

I have just added two new permissions: one to access the 'send to friend' page and another for PDF generation. They should be in the dev version in a couple of hours.

esllou’s picture

esllou commented

great work jcn. That improves the module greatly.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.