[drupal-devel] [bug] node_add disregards menu access settings
javanaut
drupal-devel at drupal.org
Wed Mar 2 00:32:54 UTC 2005
Issue status update for http://drupal.org/node/18221
Project: Drupal
Version: 4.5.0
Component: node system
Category: bug reports
Priority: normal
Assigned to: javanaut
Reported by: javanaut
Updated by: javanaut
Status: patch
Attachment: http://drupal.org/files/issues/node_add_menu_security.patch (949 bytes)
node/add lists out all modules on the site that the user has permission
to create. This list should additionally check that the node/add/$type
menu path is accessible, otherwise, the page generates dead links to
these inaccessible paths.
I've attached a patch that adds this check to the node_add function
when no $type is specified.
javanaut
More information about the drupal-devel
mailing list