Quantcast
Channel: Issues for Drupal core
Viewing all articles
Browse latest Browse all 296466

Don't use link in message after node save if user doesn't have permissions

$
0
0

Problem/Motivation

When user saves node then Drupal should check if user has access to it and then decide if the new node title in the message should be link or not.

Message with link
Created message

User doesn't have access to it
Error

Steps to reproduce

  1. Drupal 11.x installation.
  2. Create content of type test.
  3. Make content type test unpublished by default.
  4. Create a role test_creator and give it access to create content of type test.
  5. Create a user qa with the role test_creator.
  6. Log in as user qa.
  7. Create a node of type test.
  8. After saving, you will see a message about the successful creation of a new node with a link to the new node, but when you go to it you will receive a 403 error.

Proposed resolution

Add a node access check.


Viewing all articles
Browse latest Browse all 296466

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>