0

I have a View and Edit button appearing on pages that are Taxonomy driven, even when I am not logged in (and in Incognito Mode).

These pages use the URL /taxonomy/term/%taxonomy_term and Views, using info from the URL, are used to display certain data on these pages. For example, with /cars/honda/civic 'cars', 'honda' and 'civic' would be used in the Views to show relevant information about Honda Civics.

The issue is that whilst there is no View and Edit buttons appearing on the base /cars page, they are appearing on every sub page (/cars/honda, /cars/toyota/camry, etc).

I can't find anything out of the ordinary in Permissions.

Would any one know what I could do to stop this?

(PS clicking the Edit button whilst not logged in does nothing - just takes you to 403 page).

1 Answer 1

0

This was due to someone not surrounding this code with a permissions checker, eg:

 if (!user_access('administer nodes')) {
    return;
  }

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.