Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Currently the node outline form does not properly verify a user can perform the CRUD operations before exposing the corresponding links to the end user.
This can result in a poor user experience when a user clicks a link that should not have been displayed to him/her.
Comment | File | Size | Author |
---|---|---|---|
#1 | book_manager-988112.patch | 1.92 KB | jgraham |
Comments
Comment #1
jgraham CreditAttribution: jgraham commentedThis is essentially a rollback of http://drupal.org/cvs?commit=329634 the assumption that every page in a personal book is owned by the same author is incorrect.
Users with global book privileges can add pages to other users personal books. This is general functionality that can be managed via permissions settings. As such personal books are not forced to have nodes by the book owner. Be careful how global book privileges are granted.
http://drupal.org/cvs?commit=458938