Permalink
Browse files

BUG Find Form actions in CompositeFields for access checks

This bug was introduced with the new nested CMS actions
around December 2012, but wasn't noticed until now
because checkAccessAction() would wrongly return TRUE
before the dataFieldByName() check was reached.
  • Loading branch information...
1 parent 7ec8ebb commit 14dcc82e76f37aa733f4f35e16bfcb20fb7cbb68 @chillu chillu committed Feb 18, 2013
Showing with 1 addition and 1 deletion.
  1. +1 −1 forms/Form.php
View
@@ -289,7 +289,7 @@ public function httpSubmission($request) {
$this->controller->hasMethod($funcName)
&& !$this->controller->checkAccessAction($funcName)
// If a button exists, allow it on the controller
- && !$this->actions->fieldByName('action_' . $funcName)
+ && !$this->actions->dataFieldByName('action_' . $funcName)
) {
return $this->httpError(
403,

0 comments on commit 14dcc82

Please sign in to comment.