Hi,

For the creation of a non-public faced website we are making use of this module to allow advanced blog functionalities. However there seems to be a flaw in the hook_menu() implementation, that bypasses the access control system for the advanced_blog/list page.
Basically, everyone has access to that page, regardless of permissions set.

In attachment is a patch that fixes the wrong parameters in the menu item.

I hope you will implement this in the next (beta) release of this module, as it's quite critical.

Kind regards,

Sven Decabooter

CommentFileSizeAuthor
advanced_blog_permissions.patch788 bytessvendecabooter

Comments

svendecabooter’s picture

svendecabooter
he/him
Primary language Dutch
Location Gent
commented
Status: Active » Closed (fixed)

Nevermind, i noticed this was fixed in the HEAD version of the module... installing that one now...