Contrib.social

Downloading files attached to reviews requires administer cps reviews permission

Open on Drupal.org →
Created on 30 August 2023, over 1 year ago

Problem/Motivation

Non admin users can't view files attached to CPS reviews. This is because cps review basically shuts down all entity access in a way that doesn't make a lot of sense.

Credit goes to Earl Miles.

Testing

Flush caches to ensure module_implements catches the new hook.
Create a site version and a piece of content; attach a file as a review.
Log in or masquerade as a a non-admin user.
Ensure you can click on and download the file.

Proposed resolution

Implement a cps_review file download access alter to ensure that any files attached to cps reviews are downloadable given the right permissions.

Remaining tasks

Review.

🐛 Bug report
Status

Needs review

Component

Code

Created by

🇮🇹Italy marco

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024