This module currently uses the permission "access content" for the autocomplete callback URL. This is not correct, it should be using the permission "search content". This is especially obvious when using the Apache Solr Multisite Search module on a site with no content.

The attached patch (against 6.x-1.2) fixes this issue.

CommentFileSizeAuthor
#1 correct_permission-1098386-1.patch869 bytessdrycroft
apachesolr_autocomplete.module.patch723 bytessdrycroft
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

sdrycroft’s picture

sdrycroft CreditAttribution: sdrycroft commented
FileSize
correct_permission-1098386-1.patch869 bytes

Patched the drupal.org way.

janusman’s picture

janusman CreditAttribution: janusman commented
Status: Needs review » Fixed

Good catch! Fixed on 6.x and 7.x branches.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.