Closed (duplicate)
Project:
Drupal core
Version:
7.0
Component:
comment.module
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
29 Jan 2011 at 01:55 UTC
Updated:
29 Jan 2011 at 03:41 UTC
comment_form_submit() calls user_access('post comments'), and if denied, will not save the comment.
This makes the comment_form impossible to submit via drupal_form_execute(). At least, without playing complex and potentially dangerous tricks with the global user.
The comment form is not displayed unless the user has permission. Why check again?
Comments
Comment #1
agentrickard#687584: Remove access checks from comment_form_submit()