Quantcast
Channel: Issues for Drupal core
Viewing all articles
Browse latest Browse all 294447

Bulk form for Inaccessible entities still have rows generated for them in views, containing form wrapper markup *and* the label

$
0
0

Problem/Motivation

While working on #3063216: Inaccessible Media entities still have rows generated for them in the Media Library view, containing form wrapper markup *and* the media label, we noticed the default bulk form in views has the same problem. Even though users might not have access to an entity, a views row could potentially still be generated. The bulk form could in this case disclose the label of entities users don't have access to. It was suggested in #3063216-21: Inaccessible Media entities still have rows generated for them in the Media Library view, containing form wrapper markup *and* the media label to have a setting to allow site builder to configure whether "view" or "view label" access should be necessary to allow access to the bulk form.

Proposed resolution

Add a setting to the bulk form plugin to optionally check "view" or "view label" access to entities when showing the bulk form.

Remaining tasks

Write patch
Review
Commit

User interface changes

Added a setting to the bulk form configuration.

Added new configuration option to bulk form.

API changes

Data model changes

Release notes snippet


Viewing all articles
Browse latest Browse all 294447

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>