Feature proposal #6403: Improve ajax endpoint access to be consistent with profile access - CB - Joomlapolis forge

Actions

Copy link

Feature proposal #6403

closed

Improve ajax endpoint access to be consistent with profile access

Added by krileon almost 8 years ago. Updated 3 months ago.

Status:

Closed

Priority:

Normal

Assignee:

krileon

Target version:

CB 2.9.3

Start date:

02 January 2017

Due date:

% Done:

100%

Estimated time:

Description

The ajax endpoint access doesn't consider checking access to self. So if the user being accessed is also the viewing user then the profile access check should be ignored as regardless of what profile access is set to the user can still access themselves.

https://www.joomlapolis.com/forum/255-developer-members-support/235613-cb-core-fields-ajax-only-working-if-profile-view-access-level-set-to-all-users#289471

Actions

Copy link

Updated by krileon almost 8 years ago

Specifically it's the "Profile View Access Level" parameter. This needs to be consistent between directly accessing a profile and accessing a profile via ajax.

Actions

Copy link