Node module must not set user.node_grants:* context if current user != acting user

Created on 8 February 2023, almost 2 years ago

Problem/Motivation

user.node_grants:* render cache context depends on the _current user_, it is generated based on the current user. However, where this cache context is added to the render result there is usually available a user reference ($account, but I prefer to call it "acting user") that might not be the same as the current user. Therefore marking a render result vary per current user's node grants is incorrect.

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet

🐛 Bug report
Status

Active

Version

10.1

Component
Node system 

Last updated 4 days ago

No maintainer
Created by

🇭🇺Hungary mxr576 Hungary

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024