SA-CORE-2025-002 by jeff cardwell, benjifisher, poker10, mingsong
parent
c1b8906979
commit
6a38c5a3d8
|
@ -53,7 +53,7 @@ abstract class FieldUpdateActionBase extends ActionBase {
|
|||
$result = $object->access('update', $account, TRUE);
|
||||
|
||||
foreach ($this->getFieldsToUpdate() as $field => $value) {
|
||||
$result->andIf($object->{$field}->access('edit', $account, TRUE));
|
||||
$result = $result->andIf($object->{$field}->access('edit', $account, TRUE));
|
||||
}
|
||||
|
||||
return $return_as_object ? $result : $result->isAllowed();
|
||||
|
|
|
@ -78,6 +78,14 @@ class ExposedFilterAJAXTest extends WebDriverTestBase {
|
|||
* Tests if exposed filtering via AJAX works for the "Content" View.
|
||||
*/
|
||||
public function testExposedFiltering(): void {
|
||||
// Create an account that can update the sticky flag.
|
||||
$user = $this->drupalCreateUser([
|
||||
'access content overview',
|
||||
'administer nodes',
|
||||
'edit any page content',
|
||||
]);
|
||||
$this->drupalLogin($user);
|
||||
|
||||
// Visit the View page.
|
||||
$this->drupalGet('admin/content');
|
||||
|
||||
|
|
Loading…
Reference in New Issue