SA-CORE-2025-002 by jeff cardwell, benjifisher, poker10, mingsong

merge-requests/11262/head
Dave Long 2025-02-18 22:40:30 +00:00
parent c1b8906979
commit 6a38c5a3d8
No known key found for this signature in database
GPG Key ID: ED52AE211E142771
2 changed files with 9 additions and 1 deletions

View File

@ -53,7 +53,7 @@ abstract class FieldUpdateActionBase extends ActionBase {
$result = $object->access('update', $account, TRUE);
foreach ($this->getFieldsToUpdate() as $field => $value) {
$result->andIf($object->{$field}->access('edit', $account, TRUE));
$result = $result->andIf($object->{$field}->access('edit', $account, TRUE));
}
return $return_as_object ? $result : $result->isAllowed();

View File

@ -78,6 +78,14 @@ class ExposedFilterAJAXTest extends WebDriverTestBase {
* Tests if exposed filtering via AJAX works for the "Content" View.
*/
public function testExposedFiltering(): void {
// Create an account that can update the sticky flag.
$user = $this->drupalCreateUser([
'access content overview',
'administer nodes',
'edit any page content',
]);
$this->drupalLogin($user);
// Visit the View page.
$this->drupalGet('admin/content');