Contrib.social

Allow change host access without update permission

Open on Drupal.org →
Created on 24 January 2025, 3 days ago

Problem/Motivation

Allow access to change host via change host permission only, without registration update permission. Currently this would require patching the module or removing a hook, which is non-standard, due to a Forbidden access result in the existing access hook.

Proposed resolution

Add a setting on the global settings page (not per Registration type) which disables the update permission check. The difficulty is that allowing this could allow someone to gain a backdoor method of updating a registration, since fields are edited during the change host workflow.

Remaining tasks

User interface changes

API changes

Data model changes

📌 Task
Status

Active

Version

3.3

Component

Registration Change Host

Created by

🇺🇸United States john.oltman

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024