Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

BUG Find Form actions in CompositeFields for access checks

This bug was introduced with the new nested CMS actions
around December 2012, but wasn't noticed until now
because checkAccessAction() would wrongly return TRUE
before the dataFieldByName() check was reached.
  • Loading branch information...
commit 14dcc82e76f37aa733f4f35e16bfcb20fb7cbb68 1 parent 7ec8ebb
Ingo Schommer chillu authored
Showing with 1 addition and 1 deletion.
  1. +1 −1  forms/Form.php
2  forms/Form.php
View
@@ -289,7 +289,7 @@ public function httpSubmission($request) {
$this->controller->hasMethod($funcName)
&& !$this->controller->checkAccessAction($funcName)
// If a button exists, allow it on the controller
- && !$this->actions->fieldByName('action_' . $funcName)
+ && !$this->actions->dataFieldByName('action_' . $funcName)
) {
return $this->httpError(
403,
Please sign in to comment.
Something went wrong with that request. Please try again.