Conflicts with field_collection module permissions

Created on 19 May 2014, almost 11 years ago
Updated 4 January 2025, 2 months ago

Ok, this took forever to track down. If you have a field that is in a field collection (provided by the field_collection module) then you have to turn on the "Administer Field Collections" permission for the roles that need to be able to download the files that are under private_files_download_permissions ACL. This is a security flaw since I don't want the role selected to be able to modify the fields at all.

🐛 Bug report
Status

Closed: outdated

Version

2.0

Component

Code

Created by

🇺🇸United States HeathN

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024