access denied when user has only "view own" permission set to a custom profile

Created on 7 August 2021, almost 4 years ago
Updated 15 April 2025, 23 days ago

Problem/Motivation

I need to make a profile for a user. One that he can only view but not edit in any way.

The way it should work, as I understand, he should only have "view own profile" set to both profiles in general and the custom profile (in this case customer_area).

Steps to reproduce

- make a custom profile.
- set the permission for a role that uses that profile to view only.

expected behavior:
user can view the profile, but not edit it in any way.

actual behavior:
access denied. User can't even access the page.

note 1:
If I also give the user the permission to "update own profile" for this custom profile type.
Then he can access the profile. But he can, naturally also edit it then, which for this situation defeats the purpose.

note 2: it doesn't matter if I let the user create the profile first, or if I create it for him. The result is the same.

Happens to me both on version 8.x-1.2 and 8.x-1.3 (no idea why I can only select the dev version in this issue form on top... so I am listing these version here.)

πŸ› Bug report
Status

Closed: works as designed

Version

1.0

Component

Code

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024