Hi,
I created a view with 3 page displays namely Admin, Vendor and Supplier. I set the access permission based on the Role as follows

1.) Admin page display -> Administrator Role with this page override
2.) Vendor page display -> Vendor Role with this page override
3.) Supplier page display -> Supplier Role with this page override

At first, I thought the access permission to be working fine. Later I came across that This Page Display Override does NOT work at all. All displays will be changed to the last set access permission. Meaning to say that the Access Permission setting is currently global to all displays within a view. If so, why is there a This Page Override for permission setting ?

Fortunately we discovered earlier, if not all the info which is supposed to be accessed by Admin will be exposed to the supplier.

Drupal is said being the most secure but this obvious bug has changed my client's perception towards Views. Thanks

Comments

jetwodru’s picture

Issue summary: View changes
jetwodru’s picture

Finally I came across this #1174588-16: Overriding 'Display access settings' changes all displays unless 'Access control type' is also overridden and it worked, well I still doubt if Views Permission was designed to work that way. Thanks