开发者

Drupal wrongly allowing access for anonymous users to a single edit page

开发者 https://www.devze.com 2023-02-08 21:47 出处:网络
My Drupal / ubercart install has a bizarre issue. Anonymous users can access an edit page /node/44/edit for s SINGLE node only - an ubercart product. I have created a new version of the node, which do

My Drupal / ubercart install has a bizarre issue. Anonymous users can access an edit page /node/44/edit for s SINGLE node only - an ubercart product. I have created a new version of the node, which does not have the issue. The tabs (view / edit) are also available on the product page to anonymous users. The issue became clear when the page was edited by a spam bot.

Is there any way I can output the decision making process which Drupal makes to the screen? For example can I 开发者_运维技巧output the variables to the screen which Drupal uses to make the decision about whether the user has access to a given URL or not?

Thanks in advance.


There may be a better way, but to start, you could create a custom module that implements hook_menu_alter, then dump the contents of the $items array, to see the access callback associated with /node/44/edit or /node/%/edit.


One thing to try would be to "rebuild node permissions" You do this from the admin/content/node-settings page. It might be as simple as the permissions being jacked up, which is rare but does happen sometimes.

0

精彩评论

暂无评论...
验证码 换一张
取 消

关注公众号