yep.

Files: 
CommentFileSizeAuthor
trivial_patch_month_award.patch438 bytesgreggles

Comments

Well done! Committed and pushed to 7.x. :)

Title:forum_index not form_indexD8 followup DRUPAL-SA-CORE-2012-002 - Access bypass - forum listing
Version:7.x-dev» 8.x-dev
Issue tags:+Security improvements

Cool, so that needs to be merged with the code for the node access issue. That's in the private tracker as #61339.

Status:Active» Closed (duplicate)

Actually, it looks like there's already a public issue for this with some patches at #1302404: D8 followup DRUPAL-SA-CORE-2012-002 - Access bypass - forum listing. Closing this as a duplicate.