[drupal-devel] [bug] node_add disregards menu access settings

[javanaut]

Issue status update for http://drupal.org/node/18221

 Project:      Drupal
 Version:      4.5.0
 Component:    node system
 Category:     bug reports
 Priority:     normal
 Assigned to:  javanaut
 Reported by:  javanaut
 Updated by:   javanaut
 Status:       patch
 Attachment:   http://drupal.org/files/issues/node_add_menu_security_0.patch (959 bytes)

I realized that some node modules don't define a menu path for
node/add/$type, so this version of the patch accommodates such modules
by allowing the link to be displayed if no such path is defined.


javanaut



Previous comments:
------------------------------------------------------------------------

March 1, 2005 - 18:32 : javanaut

Attachment: http://drupal.org/files/issues/node_add_menu_security.patch (949 bytes)

node/add lists out all modules on the site that the user has permission
to create.  This list should additionally check that the node/add/$type
menu path is accessible, otherwise, the page generates dead links to
these inaccessible paths.
I've attached a patch that adds this check to the node_add function
when no $type is specified.