I've just started digging into Acidfree, so I may be missing something, but...
hook_menu has an item for album/{$path[1]}/edit that has 'access' => 1. This is causing edit to be displayed on all album views, including anonymous users. Is this how this is supposed to be? Or am I jumping the gun on a 'to do later' kind of thing?

If we need a user_access for this, I'll be happy to make a patch.

Comments

vhmauery’s picture

Status: Active » Fixed

Nice catch. :)

Yes, that was a temporary fix from long ago that never got fixed in the album/taxonomy rewrite. Rather than 'access' => 1, it should be 'access' => node_access('update', $album).

I have committed the fix to CVS.

vhmauery’s picture

Status: Fixed » Closed (fixed)