notice: Undefined variable: conflict_grants in project_issue.module on line 1213.
on the main admin/ page and at admin/report/status
in conditions that cause this message to appear:
Project Issue to link filter conflicts with project issue access settings. Users who do not have access to all project issues may be able to see titles of project issues. You should disable this filter in Filtered HTML input format.
Btw, I'd rather have the above warning downgraded to a simple notification. On a site where users have access to *no* content at all, and cannot create any content, the warning is not applicable.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | 656918.patch | 1.33 KB | jennifer.chang |
Comments
Comment #1
jennifer.chang commentedComment #2
jennifer.chang commentedalso on the admin/ page:
notice: Undefined variable: conflict_anonymous in project_issue.module on line 1223.
Comment #3
dwwThanks! I modified this quite a bit, and also fixed the conflict_anonymous notice, tested, and committed to HEAD:
http://drupal.org/cvs?commit=315056
Please open a separate issue if you still feel strongly about downgrading this from an error to a warning. Granted, the way project and project_issue handles access and permissions is currently dumb (see #317404: Add Project Permissions Functionality). However, until that's all resolved, I'd rather err on the side of safety and scream loudly to sites if they're configured in such a way that can lead to information disclosure.
Comment #5
jennifer.chang commentedthanks for the fix.
Here is the follow up issue on the requirements:
#716840: issuefilter conflicts with project issue not always applicable