Project

General

Profile

Actions
Copy link

Feature proposal #6403

closed

Improve ajax endpoint access to be consistent with profile access

Added by krileon almost 8 years ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
krileon
Target version:
CB 2.9.3
Start date:
02 January 2017
Due date:
% Done:

100%

Estimated time:

Description

The ajax endpoint access doesn't consider checking access to self. So if the user being accessed is also the viewing user then the profile access check should be ignored as regardless of what profile access is set to the user can still access themselves.

https://www.joomlapolis.com/forum/255-developer-members-support/235613-cb-core-fields-ajax-only-working-if-profile-view-access-level-set-to-all-users#289471

Actions
Copy link

Also available in: Atom PDF