Currently the node outline form does not properly verify a user can perform the CRUD operations before exposing the corresponding links to the end user.

This can result in a poor user experience when a user clicks a link that should not have been displayed to him/her.

CommentFileSizeAuthor
#1 book_manager-988112.patch1.92 KBjgraham
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

jgraham’s picture

Status: Active » Fixed
FileSize
1.92 KB

This is essentially a rollback of http://drupal.org/cvs?commit=329634 the assumption that every page in a personal book is owned by the same author is incorrect.

Users with global book privileges can add pages to other users personal books. This is general functionality that can be managed via permissions settings. As such personal books are not forced to have nodes by the book owner. Be careful how global book privileges are granted.

http://drupal.org/cvs?commit=458938

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.