Unable to get revision access to work

Created on 4 April 2023, about 2 years ago
Updated 11 August 2023, over 1 year ago

When a user visits an authlink for a page revision, such as node/NID/revisions/VID/view?authkey=XXX, in node_authlink_check_authlink(), the value of $op is view revision.

This is not one of the values that can be configured; node_authlink_form_node_type_form_alter() has a hard-coded list with view, update, and delete. Because these don't match, access is denied. It seems to me that an authlink can never provide access to a revision.

I discovered the above because our authlinks to revisions used to work, but appear to have broken when updating Drupal core from 9.2 to 9.3. I would like to understand what changed to cause it to break. Does anyone know if the value of $op changed from view to view revision?

💬 Support request
Status

Closed: outdated

Version

1.4

Component

Code

Created by

🇨🇦Canada Liam Morland Ontario, CA 🇨🇦

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024