Feature proposal #6403: Improve ajax endpoint access to be consistent with profile access - CB - Joomlapolis forge

Actions

Copy link

Feature proposal #6403

open

Improve ajax endpoint access to be consistent with profile access

Added by krileon over 7 years ago. Updated 6 months ago.

Status:

Assigned

Priority:

Normal

Assignee:

krileon

Target version:

CB 2.9.2

Start date:

02 January 2017

Due date:

% Done:

Estimated time:

Description

The ajax endpoint access doesn't consider checking access to self. So if the user being accessed is also the viewing user then the profile access check should be ignored as regardless of what profile access is set to the user can still access themselves.

https://www.joomlapolis.com/forum/255-developer-members-support/235613-cb-core-fields-ajax-only-working-if-profile-view-access-level-set-to-all-users#289471