I've had a site running for several months where I enabled Flags for testing purposes of the site's editors. I thought it would be a nice feature for them to be able to bookmark nodes and keep track of them that way.

I was running a test on something unrelated by logging in as a common, authenticated user, who only has comment permissions. I was alarmed to see the 'Bookmarks' tab on the User page.

I went back to Permissions, made sure only I had permissions to admin the flags module, then went into the Bookmarks profile and made sure only site editors and myself had bookmark rights.

So even though the tab leads to an empty View, it looks bad to have a tab in there when there shouldn't be.

Apart from completely disabling this module, or having to hack User tabs, how do I stop this? Is this a known behavior? Thanks.

Comments

ccshannon’s picture

ccshannon commented

I disabled the module, and the thing (tab) was still there. I found the Views, then set access permissions in the View to be only for me. Went back to to auth account, and it was still there!!!

I deleted the two flags Views (which frankly should be deleted when I disable the module - it's not good when the module doesn't clean up after itself) and now finally the thing is gone.

So, I assume the answer to my first question above is 'Set the permissions in the View' but it didn't work. Did I need to empty cache?

quicksketch’s picture

quicksketch
he/him
commented
Category: bug » support
Status: Active » Fixed

It's important to note that the listing you make (through Views) are completely independent of Flag module, so disabling Flag module does not delete the corresponding listing. If you want the tab to be available to only certain users, then set access on the view to certain roles.

ccshannon’s picture

ccshannon commented

Thanks. I know that now, for sure. What is weird is that when I set the permissions through the View, I still get the user tab for a role not given permission, but that is me wrestling with Views, not with Flag. Much appreciated.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.