If you check the 'Redirect administrators to Dashboard after log in' box at /admin/settings/control it redirects the user regardless of their permissions. It says on that page "Users with the Have Total Control permission can be automatically redirected to the Dashboard when they log in.". So, it should check the user has the Have Total Control permission before performing the redirect, which it doesn't. This results in an access dened page for users that log in and do not have that permission, as it sends them on to /admin/settings/control, which they do not have the permissions to view.

See attached patch for fix:

CommentFileSizeAuthor
total_control-redirect.patch685 bytesmrfelton

Comments

jenlampton’s picture

jenlampton
she / her
commented
Status: Needs review » Fixed

Patch committed to dev, will be included in the next release.
Thanks!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

emarchak’s picture

emarchak commented

I'm working off of 6.x-1.2 with that patch applied and I'm still getting users without Have Total Control permissions being redirected to the page on login. Anything else I should check?

broncomania’s picture

broncomania commented

I have the same trouble with uebercart! My workaround at the moment disable this module or is there an aternative?