- Issue created by @leymannx
- Issue was unassigned.
- Status changed to Fixed
4 months ago 11:06am 5 August 2024 - Assigned to leymannx
- Status changed to Closed: won't fix
4 months ago 11:10am 5 August 2024 - leymannx Berlin
Damn, merging this was premature. I now understand that viewing unpublished terms is part of the business logic of this module. I'll revert the commit.
- Status changed to Active
4 months ago 11:23am 5 August 2024 - leymannx Berlin
Okay, let's do this differently then. Let's add another permission "view unpublished terms in [vocabulary]" for every vocabulary.
-
leymannx →
committed e560e365 on 8.x-1.x
Issue #3465902: Prevent view access to unpublished terms
-
leymannx →
committed e560e365 on 8.x-1.x
- Status changed to Fixed
4 months ago 12:03pm 5 August 2024 - leymannx Berlin
Okay, so in D7 taxonomy terms didn't have a status. That's why this was never part of the D7 version of taxonomy permissions. But D8+ comes with a status for terms and by default you have no access to them when they are unpublished. To avoid surprises as stated on the module's description page we should follow this pattern for now. And merge the prior MR as is. And if anybody requires it, we can add the view unpublished permissions. I think this is the way to go.
- Issue was unassigned.
Automatically closed - issue fixed for 2 weeks with no activity.