Views wrongly flagged as missing access checks

Created on 9 November 2020, over 3 years ago
Updated 29 May 2024, 30 days ago

checkViewsAccess() loops through all of each view's view displays, including the one used to store default values, 'default'. If none of the displays on a view has its access restrictions apply to all displays, then default's unused access restriction value will cause the view to get flagged as missing access restrictions, even if all of the enabled displays do indeed have them.

Having no display's access restriction as the default one is probably not great as it represents possible future problems, and maybe that should be flagged, but that's not the error given. I'm unsure if this should be a code change or a text change.

This isn't a security issue as such, though might be eroding security if people are muting the alert when they can't find the missing restrictions.

Also applies to 8.x-2.0.

πŸ› Bug report
Status

Closed: outdated

Version

3.0

Component

Code

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.69.0 2024