Project

General

Profile

Actions

Feature proposal #6403

open

Improve ajax endpoint access to be consistent with profile access

Added by krileon over 7 years ago. Updated 6 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
Start date:
02 January 2017
Due date:
% Done:

0%

Estimated time:

Description

The ajax endpoint access doesn't consider checking access to self. So if the user being accessed is also the viewing user then the profile access check should be ignored as regardless of what profile access is set to the user can still access themselves.

https://www.joomlapolis.com/forum/255-developer-members-support/235613-cb-core-fields-ajax-only-working-if-profile-view-access-level-set-to-all-users#289471

Actions #1

Updated by krileon over 7 years ago

Specifically it's the "Profile View Access Level" parameter. This needs to be consistent between directly accessing a profile and accessing a profile via ajax.

Actions #2

Updated by krileon almost 6 years ago

  • Target version changed from CB 2.2 to CB 2.8
Actions #3

Updated by beat about 1 year ago

  • Target version changed from CB 2.8 to CB 2.8.1
Actions #4

Updated by beat 8 months ago

  • Target version changed from CB 2.8.1 to CB 2.8.2
Actions #5

Updated by beat 7 months ago

  • Target version changed from CB 2.8.2 to CB 2.9.0
Actions #6

Updated by beat 6 months ago

  • Target version changed from CB 2.9.0 to CB 2.9.2
Actions

Also available in: Atom PDF