Contrib.social

Configure link is displayed even if user does not have the appropriate permission

Open on Drupal.org →
Created on 16 February 2023, over 1 year ago
Updated 5 September 2023, 10 months ago

Problem/Motivation

After upgrading from 4.08 to 4.0.14, "Configure" link is displayed even if user does not have the appropriate permission.

Steps to reproduce

  • Install environment_indicator 4.0.14.
  • Give authenticated role the 'access environment indicator' but not the 'administer environment indicator settings' permissions.
  • Give authenticated role the permission to use the toolbar.
  • Login as authenticated user
  • Click the environment indicator in the toolbar an you should see the "Configure" link.
  • Click "Configure link" and get "Access Denied".

Proposed resolution

Do not render "Configure" link in the toolbar if the role does not have "administer environment indicator settings" permissions.

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Fixed

Version

4.0

Component

Code

Created by

🇨🇦Canada gwvoigt London, ON 🇨🇦

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.69.0 2024