After switching users with Devel, I see the full menu of the previous user 1 (but obviously don't have access to anything).

Might only be the case with client-side caching.

CommentFileSizeAuthor
#3 admin_menu.cache-id.2.patch1.1 KBsun
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

sun’s picture

sun
Primary language German
Location Karlsruhe
CreditAttribution: sun commented

Looks like the server cache ID is broken.

When disabling client-side caching and only keeping the server cache enabled, this issue still appears (when switching users).

The cache ID was recently changed from $uid to session_id() in #1189672-12: Admin menu "flush all caches" open to csrf

sun’s picture

sun
Primary language German
Location Karlsruhe
CreditAttribution: sun commented
Title: Wrong menu is shown » Menu is cached by session ID, but session ID does not change when switching users via Devel
Status: Active » Fixed

Thanks for reporting, reviewing, and testing! Committed attached patch to all branches.

A new development snapshot will be available within the next 12 hours. This improvement will be available in the next official release.

sun’s picture

sun
Primary language German
Location Karlsruhe
CreditAttribution: sun commented
FileSize
admin_menu.cache-id.2.patch1.1 KB

Automatically closed -- issue fixed for 2 weeks with no activity.