Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.The patch resulting from bug #292565 broke functionality that existed in D6.11 and earlier.
In D6.11 and earlier, when a custom access denied page was set under admin/settings/error-reporting, the resulting access denied would correctly forward you to the page you were trying to access (destination). In D6.12, the user is forwarded to the access denied page even after logging in successfully.
To reproduce:
1. Create a new page, noting the path (i.e. node/1).
2. Under Administer -> Site Configuration -> Error Reporting, add the path to the Default 403 page.
3. Log out.
4. Try to access /admin
5. Log in.
Once you log in, you are redirected to the access denied page, which is counterintuitive and confusing for users. Without a custom error page, the expected behavior occurs (the user is redirected to the destination page, /admin).
Related post: http://drupal.org/node/292565
Since drupal_access_denied() isn't checking for (and setting) $_REQUEST['destination'] it's never set correctly and the login form doesn't know where to go.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | issue-500092-1-fix-login-redirect-on-403.patch | 471 bytes | Ryan Palmer |
Comments
Comment #1
Ryan Palmer CreditAttribution: Ryan Palmer commentedI'm getting this too.
Patch attached.
edit: this was fixed on a Drupal 6.12 site, but should probably be disregarded seeing how much it has been discussed and committed already over at #292565: Regression: Can't set /user to 403 page (was: login destination is broken). Use it if you wish, however... it fixes the issue for me.
Comment #2
Ryan Palmer CreditAttribution: Ryan Palmer commentedDuplicate of #292565: Regression: Can't set /user to 403 page (was: login destination is broken)