Move to wishlist view button does not respect access wishlist permission

Created on 15 May 2020, over 4 years ago
Updated 2 April 2024, 8 months ago

The "Move to wishlist" view button that can be added to the cart view (and possibly elsewhere?) does not check the "access wishlist" permission before displaying the button.

This means that anon users can add items to a wishlist they cannot access.

๐Ÿ› Bug report
Status

Fixed

Version

3.0

Component

Code

Created by

๐Ÿ‡บ๐Ÿ‡ธUnited States rhovland Oregon

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024