My work on #468136: Nodequeue: Add test cases led me to this issue.

If you pass in a user account to nodequeue_queue_access(), the two user_access() checks are done against the currently logged in user and not the account you wish to check.

See attached patch.

CommentFileSizeAuthor
nodequeue_user_access.patch813 byteswulff

Comments

ezra-g’s picture

ezra-g commented
Status: Active » Needs review

Thanks for posting a patch -- Marking as needs review.

ezra-g’s picture

ezra-g commented
Status: Needs review » Fixed

Committed. Thanks!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.