Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable secret key validation on admin noroute to fix redirect loop #11229

Merged
merged 1 commit into from
Oct 4, 2017

Conversation

convenient
Copy link
Contributor

@convenient convenient commented Oct 4, 2017

Similar to 2f422ad but using the framework.

Fixes issue #10611 for the 2.2-develop branch.

Doesn't address the route cause, but only fixes the symptom as per #10921 (comment)

If preferred I can rebase this branch to do a cherry-pick of 2f422ad, but I figured it better to use the framework to achieve this feature.

Steps to reproduce

  1. Create a user role with no resources assigned to it.
  2. Create an admin user with that role.
  3. Log in with that user.
  4. Should see an "Access denied" screen rather than a redirect loop.

Contribution checklist

  • Pull request has a meaningful description of its purpose
  • All commits are accompanied by meaningful commit messages
  • All new or changed code is covered with unit/integration tests (if applicable)
  • All automated tests passed successfully (all builds on Travis CI are green)

Similar to 2f422ad but using the framework.

Fixes issue magento#10611 for the `2.2-develop` branch.

Doesn't address the route cause, but only fixes the symptom as per magento#10921 (comment)
@convenient
Copy link
Contributor Author

Runtime:       PHP 7.1.9
Configuration: /home/travis/build/magento/magento2/dev/tests/functional/phpunit.xml
...............
The job exceeded the maximum time limit for jobs, and has been terminated.

@okorshenko Any chance we can re-trigger the travis build to see if this is some intermittent issue?

@okorshenko
Copy link
Contributor

Done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants