Organic groups allows group administrators to change group's theme, even if they don't have "select different theme" permission

Created on 2 February 2011, almost 14 years ago
Updated 27 October 2024, 2 months ago

Steps to reproduce:

1. Enable at least two themes
2. Create a role that does not have permission to "select different theme" (under system module)
3. Create a group using a user with that role

Expected behavior: Theme configuration options do not appear
Actual behavior: Theme configuration options appear, allowing group administrator to pick a new theme for the group

Forgive me if there's a separate permission for this somewhere -- I looked high and low in og and the permissions page, and searched the issue queue. This seems to be a relatively recent issue with a recent update, though unfortunately I don't have specific information about when it started. But certainly six months ago this was not present.

Installed:
Drupal 6.20
OG 2.1
OG Content Type Admin 1.2
OG Defaults 1.0
OG Panels 2.x-dev
OG User Roles 4.1
OG Aggregator 1.x-dev
OG Vocabulary

Let me know if there's anything else I can do to provide information to troubleshoot this.

✨ Feature request
Status

Closed: outdated

Version

2.2

Component

og.module

Created by

πŸ‡ΊπŸ‡ΈUnited States rootwork πŸ‡ΊπŸ‡Έ US-Pacific 🌎 Chinook (Multnomah, Clackamas) & Cowlitz lands 🌹 Portland, OR

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡·πŸ‡΄Romania claudiu.cristea Arad πŸ‡·πŸ‡΄

    This version of Drupal is not supported anymore. If this is still an issue in the 8.x-1.x branch, please open a new up-to-date ticket. Closing.

Production build 0.71.5 2024