Downloads

Download nodeaccess_userreference-6.x-3.5.tar.gztar.gz 10.39 KB
MD5: 6fc41b30dde63bac5396b1b247d0c0e0
SHA-1: 61ff087bc4d75ee0fbc33d287b7a29803a450151
SHA-256: d54ee82711161a5118e3d6bd5f76fbef4b4a8c2f86c9c19923d2019064834348
Download nodeaccess_userreference-6.x-3.5.zipzip 11.67 KB
MD5: dd3488cf4d73bf66907882d7f1f70304
SHA-1: bbc9f9c908cdda8be64fed8191afcedcda904212
SHA-256: e69a958d8c6cc61a90f797df7d750cf897c36077f53ff901264779ece947df35

Release notes

When an author has created content containing a user reference field (with author update/delete grants enabled) and the author's user account is later deleted, content created by them can be edited by anonymous users.

This release fixes this issue.

SA-CONTRIB-2013-049 - Node access user reference - Access Bypass

Created by: galooph
Created on: 29 May 2013 at 14:40 UTC
Last updated: 29 May 2013 at 15:35 UTC
Git tag 6.x-3.5
Security update

Other releases