The "access img_assist" permission, when disabled for a role, correctly doesn't show img_assist's icon/link below textareas. However, with the 'drupalimage' plugin enabled in TinyMCE for that role's TinyMCE profile, the camera icon displays regardless of the permission, meaning users have access to the pop-up window and can insert images this way.

Comments

darren oh’s picture

darren oh
Primary language English
Location Lakeland, Florida
commented
Component: Code » TinyMCE Plugin (drupalimage)
sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Version: 4.7.x-1.x-dev » 5.x-1.x-dev
sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Project: Image Assist » TinyMCE
Component: TinyMCE Plugin (drupalimage) » Code

How does TinyMCE ensure access permissions for editor buttons? Is there a way to display a plugin button only if a user has a certain access permission?

Please move back to Img_Assist queue after clarifying this.

pomliane’s picture

pomliane commented
Status: Active » Closed (won't fix)

This version of TinyMCE is not supported anymore. The issue is closed for this reason.
Please upgrade to a supported version and feel free to reopen the issue on the new version if applicable.

This issue has been automagically closed by a script.