Feature proposal #6403: Improve ajax endpoint access to be consistent with profile access - CB - Joomlapolis forge

Actions

Copy link

Feature proposal #6403

open

Improve ajax endpoint access to be consistent with profile access

Added by krileon over 7 years ago. Updated 6 months ago.

Status:

Assigned

Priority:

Normal

Assignee:

krileon

Target version:

CB 2.9.2

Start date:

02 January 2017

Due date:

% Done:

Estimated time:

Description

The ajax endpoint access doesn't consider checking access to self. So if the user being accessed is also the viewing user then the profile access check should be ignored as regardless of what profile access is set to the user can still access themselves.

https://www.joomlapolis.com/forum/255-developer-members-support/235613-cb-core-fields-ajax-only-working-if-profile-view-access-level-set-to-all-users#289471

Actions

Copy link

Updated by krileon over 7 years ago

Specifically it's the "Profile View Access Level" parameter. This needs to be consistent between directly accessing a profile and accessing a profile via ajax.

Actions

Copy link