Drupal
/
drupal
mirror of https://git.drupalcode.org/project/drupal.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Issue #849624 by brad.bulger, Stevel, oriol_e9g, Alan Evans: Fixed wrong permission for admin/structure/menu/parents.

8.0.x
Nathaniel Catchpole 2013-07-06 16:10:02 +01:00
parent 6c47d161d5
commit 434498c3db
2 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
core/modules/menu/lib/Drupal/menu/Tests/MenuTest.php
View File

@ -660,6 +660,24 @@ class MenuTest extends MenuWebTestBase {
$this->assertMenuLink($mlid, array('hidden' => 0));
}
/**
* Test administrative users other than user 1 can access the menu parents AJAX callback.
*/
public function testMenuParentsJsAccess() {
$admin = $this->drupalCreateUser(array('administer menu'));
$this->drupalLogin($admin);
// Just check access to the callback overall, the POST data is irrelevant.
$this->drupalGetAJAX('admin/structure/menu/parents');
$this->assertResponse(200);
// Do standard user tests.
// Login the user.
$this->drupalLogin($this->std_user);
$this->drupalGetAJAX('admin/structure/menu/parents');
$this->assertResponse(403);
}
/**
* Get standard menu link.
*/

2
core/modules/menu/menu.module
View File

@ -77,7 +77,7 @@ function menu_menu() {
'title' => 'Parent menu items',
'page callback' => 'menu_parent_options_js',
'type' => MENU_CALLBACK,
'access arguments' => array(TRUE),
'access arguments' => array('administer menu'),
);
$items['admin/structure/menu/list'] = array(
'title' => 'List menus',