'Create from template' link appears even if the user cannot use templates

Created on 13 September 2024, 2 months ago

Problem/Motivation

When viewing the standard node add form as a user without any permissions to use or manage templates, they can still see the 'Create from template' link at the top of the page. Clicking the link takes them to an access denied page.

Steps to reproduce

Access the add node form for a PATE enabled content type as a user with no PATE related permissions (but still has permissions to create the content type). You should see the link at the top of the page.

Proposed resolution

Check the 'use page templates' permission before displaying the link. I don't think we need a new permission for this?

Remaining tasks

I'll create an MR to check for the 'use page templates' permission before printing the link in pate_form_node_form_alter.

🐛 Bug report

Status

Needs review

Version

1.2

Component

Code

Created by

🇬🇧United Kingdom jphuxley

Live updates comments and jobs are added and updated live.

Merge Requests

!9'Create from template' link appears even if the user cannot use templates
Open
🇬🇧United Kingdom jphuxley
updated 2 months ago

Comments & Activities

Issue created by @jphuxley
Merge request !9Adding permission check before printing create template link 3474116 → (Open) created by jphuxley
Issue was unassigned.
Status changed to Needs review 2 months ago11:14am 13 September 2024
Comment 2 months ago →
🇬🇧United Kingdom jphuxley
I've created a MR to add the permission check. I've also added a patch for anyone who needs it.

I'll set the status to needs review. Please let me know if there are any changes requested, thanks!

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024