- last update
4 months ago 12 pass
When a role is deleted, the node access module still has its configuration which results in php errors when rebuilding permissions.
Those php errors can break the node access system completely and leak information.
The fix should be relatively easy:
- Just implement hook_role_delete
- Remove the configurations which depend on the deleted roles
- Tell the user to rebuild permissions
Needs review
2.0
Code
The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.