-
-
Notifications
You must be signed in to change notification settings - Fork 3.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[com_content] Redundant access check #21169
Conversation
I have tested this item ✅ successfully on 8d3d71e On administrator site, create a new article with permission Super Users. After that I created a new user and added him to the administration group. I logged in with the newly created user and filtered for Super Users: No articles appear. This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/21169. |
I have tested this item ✅ successfully on 8d3d71e This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/21169. |
Ready to Commit after two successful tests. |
Since the extended method now does nothing useful, it can be removed too (no, there are no B/C issues with that). |
Updated. |
Pull Request for Issue # .
Summary of Changes
This removes redundant access check from admin Articles model.
Testing Instructions
Code review. See that we already filter by access in the query:
joomla-cms/administrator/components/com_content/models/articles.php
Lines 250 to 256 in 88bcd98
Alternatively, you can check that this snippet (placed somehwere in frontend/site, e.g. in Protostar index file) doesn't return unauthorized articles. Where
$accessLevel
is some access level ID:Documentation Changes Required
No.