- 🇨🇦Canada No Sssweat
No Sssweat → made their first commit to this issue’s fork.
- @no-sssweat opened merge request.
- Status changed to RTBC
almost 2 years ago 1:08pm 1 February 2023
This one is really simple so I'm going to just blitz past all of the normal stuff. A presumable typo in CertificateController::viewAccess exists.
CURRENT CODE:
return $entity->access('view certificate', $this->currentUser, TRUE);
SHOULD BE:
return $entity->access('view', $this->currentUser, TRUE);
Prevents users who don't pass prior lines of admin privilege checking from being able to view certificates they very well likely have permission to view.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
No Sssweat → made their first commit to this issue’s fork.