Even if a user has the access webform reports, she can't access the listing page admin/content/webform_report.
I noticed that in the implementation of hook_menu, the argument passed to the user_access function (which is the access callback) is administer site configuration. I find that inconsistent with the naming of the permissions.
In the _webform_report_page function, the access webform reports permission is checked, but then it's too late for users without the administer site configuration permission.
Unless I'm overlooking something, I think that the access webform reports should control the access to the listing, and the edit and delete links should appear only for users that have edit permission over the node.
Comment | File | Size | Author |
---|---|---|---|
#1 | webform_report-permissions-1420102.patch | 2.18 KB | noel.rivas |
Comments
Comment #1
noel.rivas CreditAttribution: noel.rivas commentedProposed solution.
Comment #2
noel.rivas CreditAttribution: noel.rivas commentedForgot the status change!
Comment #3
noel.rivas CreditAttribution: noel.rivas commented