Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: rethink write permissions during save action for new pages #24

Open
jeabakker opened this issue Apr 11, 2024 · 0 comments
Open
Labels

Comments

@jeabakker
Copy link
Member

jeabakker commented Apr 11, 2024

Elgg version
5.1

Plugin version
master

Plugin source

  • Git clone (did you run composer install?)

Describe the bug

In the action the save of a new page is placed in an 'ignore access' call

$saved = elgg_call(ELGG_IGNORE_ACCESS, function () use (&$entity) {
return $entity->save();
});

This will give anybody write access to any container, even if this shouldn't be the case.

Rethink this procedure

@jeabakker jeabakker added the Bug label Apr 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

1 participant