Paths such as profile/profile_field/alpha+beta+gamma or paths with URLencoded strings such as profile/profile_class/g%C3%A5r+i+klass+4 (for us who run non-English sites) are not protected even with patterns such as profile/profile_class* and similar.

Comments

budda’s picture

budda
Primary language English
Location Cheshire
commented

What do you mean by "not protected" ?

solipsist’s picture

solipsist commented

You can't deny access to paths that contain anything but basic alfa-numeric chars. I.e. they are not protected since path access can't block access to them.

budda’s picture

budda
Primary language English
Location Cheshire
commented
Version: master » 5.x-1.x-dev
Assigned: Unassigned » budda

Can you make Drupal blocks appear/disappear form the same type of urls?
The path_access module uses the same code as Drupals block visibility system.

Leeteq’s picture

Leeteq commented

Subscribing.

solipsist’s picture

solipsist commented

I'll have to take a new look, it's been almost 18 months since I last tried this.

budda’s picture

budda
Primary language English
Location Cheshire
commented
Status: Active » Postponed (maintainer needs more info)

Any update on if these rules were possible on Drupals block system?