[drupal-devel] [bug] node_add disregards menu access settings

javanaut drupal-devel at drupal.org
Wed Mar 2 00:32:54 UTC 2005


Issue status update for http://drupal.org/node/18221

 Project:      Drupal
 Version:      4.5.0
 Component:    node system
 Category:     bug reports
 Priority:     normal
 Assigned to:  javanaut
 Reported by:  javanaut
 Updated by:   javanaut
 Status:       patch
 Attachment:   http://drupal.org/files/issues/node_add_menu_security.patch (949 bytes)

node/add lists out all modules on the site that the user has permission
to create.  This list should additionally check that the node/add/$type
menu path is accessible, otherwise, the page generates dead links to
these inaccessible paths.
I've attached a patch that adds this check to the node_add function
when no $type is specified.


javanaut




More information about the drupal-devel mailing list