Posted by greggles on August 23, 2009 at 7:55pm
Jump to:
| Project: | Project issue tracking |
| Version: | 6.x-1.x-dev |
| Component: | Views integration |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed (duplicate) |
Issue Summary
I just created a private "tracker" site and noticed that the project_issue_all_projects View doesn't require "access content" permission, which I think it should.
The view doesn't actually show any data to an anonymous user without "access content" permission, but ideally we wouldn't show a link that they can't use.
Comments
#1
#484180: Add access checking in the default issue views?