Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
This is because the auto-generated menu item for module that implement hook_hook_info() is lacking an access_callback.
Patch should theoretically apply to both D6 and D7, but I've only tested it on D6.
Comment | File | Size | Author |
---|---|---|---|
trigger_broken.patch | 553 bytes | cwgordon7 | |
Comments
Comment #1
cwgordon7 CreditAttribution: cwgordon7 commentedThis would actually work for user 1, by the way, because access_callback is being automatically set to user_access so it doesn't matter that no "Modulename" permission exists. To reproduce, try accessing the trigger page of a non-core module as any user besides user 1.
Comment #3
cwgordon7 CreditAttribution: cwgordon7 commentedMy bad, this issue has been (coincidentally?) fixed in Drupal 7, the issue is only with Drupal 6.
Comment #4
apadernoThe patch is simple, and easy.
Comment #5
Gábor HojtsyStill seeing no access callback specified there in D7:
Comment #6
Gábor HojtsyUhm, they just replaced the custom checking with a general user permission. Hah. I think in D6 the expectation was that the user access callback would be inherited. Committed.