Hi,

Users that have permissions to add / edit nodes will see the subsites selection form element, regardless of whether they should be allowed to or not.
The included patch adds a permission check before showing the form elements.

CommentFileSizeAuthor
#1 subsites_form_alter_perm_0.patch1.82 KBsvendecabooter
subsites_form_alter_perm.patch1.61 KBsvendecabooter

Comments

svendecabooter’s picture

svendecabooter
he/him
Primary language Dutch
Location Gent
commented
StatusFileSize
new subsites_form_alter_perm_0.patch1.82 KB

Perhaps it would be better to add more fine-grained control to this, as there are probably use cases where users are allowed to assign content to a subsite, without giving them full "administer subsites" permissions.
Attached a new version of the patch...

davyvdb’s picture

davyvdb commented
Status: Needs review » Fixed

Commited, thx!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.