Install

Works with Drupal: 7.x

Using Composer to manage Drupal site dependencies

Downloads

Download tar.gz 259.2 KB
MD5: 45b749ec53c704b7e5e436d57ebb17ff
SHA-1: 497d82da51f2f9839392cc344e50eeddee03baef
SHA-256: b0884758025cea58e9960ee8098103669098af7a4b538d15ed35b434a0653307
Download zip 313.28 KB
MD5: 21446c153a6fecaa642d296e05745621
SHA-1: 8b6191f16f274d9bdef5ee36ed04aeae80093a73
SHA-256: e705e5fe4786b0ba8fef47f0b6f084501719a8cc099e6d5584ad607ab1835d93

Release notes

SA-CONTRIB-2014-049 - Organic Groups (OG) - Access Bypass

Changes since 7.x-2.6:

  • Improve validation by membership state.
  • #2233365 by hctom: Static cache reset during OG role revoke.
  • #2216649 by jhedstrom: Allow normal authenticated users to edit value of an og membership field.
  • #2231217 by Amitaibu: Prevent loading entity in \OgMembership::save() upon og_group().
  • #2224509 by ezra-g | Amitaibu: Fix loading only active memberships.
  • #2096797 by Deraynger, weri: Add classes to subscribe formatter to identify the type of link/text .
  • #2220575 by ezra-g: Avoid Entity's load() method when saving group reference values.
  • #2217129 by Amitaibu | joachim: OgBehaviorHandler::validate() fails to register errors correctly.
Created by: amitaibu
Created on: 7 May 2014 at 18:15 UTC
Last updated: 2 Aug 2018 at 04:56 UTC
Security update
Bug fixes
Insecure
Unsupported

Other releases