If you are running this module along with profile_role, you can end up with links to edit profile fields that the user doesn't have rights to.

Example:
You have several categories of profile fields, assigned to different roles with profile_role.
You enable the pcp block.
You login with a user with a role that only has access to certain profile fields categories.
You see links to edit profile fields that get you an access denied page.

Using latest versions of each module.

Comments

therealwebguy’s picture

therealwebguy commented
Assigned: Unassigned » therealwebguy

This is a very good post, thank you for sharing this information. I will be implementing a solution for this 6.x-2.0 release of the PCP module.

therealwebguy’s picture

therealwebguy commented
Status: Active » Closed (fixed)
manuel garcia’s picture

manuel garcia commented

I take that this feature is already in? Awesome, thanks nrussel!!

therealwebguy’s picture

therealwebguy commented

This feature is in. Please stand by as I'm wrapping testing on a few additional items. Will be in the next commit, version 2.2.

Thanks!