Contrib.social

Incorrect permission check in RouteSubscriber.php

Open on Drupal.org →
Created on 12 December 2024, about 1 month ago

The permission check inside of RouteSubscriber.php checks for the permission:

access xray audit reports

This permission doesn't exist. I believe it should be xray_audit access.

You can replicate by assigning the xray_audit access permission to a user without administrator permissions, they can access the xray audit home page, but none of the reports.

🐛 Bug report
Status

Active

Version

1.0

Component

Code

Created by

🇦🇺Australia thomwilhelm Sydney

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024