Views permissions not respected by TVI

Created on 30 June 2016, over 8 years ago
Updated 27 July 2023, over 1 year ago

Hello, thank you for the terrific module!

I am currently on the latest dev branch of TVI and Drupal 8.1.3. I have created a view which has limited access to only a few roles. However, when I visit the taxonomy's URL directly, it still displays the view even when I view it as an anonymous user. This is a bit of a security issue, because it means that views may be displayed in a way which circumvents their access settings.

πŸ› Bug report
Status

Needs work

Version

2.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States rich_dawson

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡¨πŸ‡¦Canada mikeohara Moncton, NB

    Moving this to the 2.x branch to be reviewed. (Will backport to the 8.x-1.x branch if nessesary)

    This is still an issue that has not been fixed?

Production build 0.71.5 2024