Permalink
Browse files

BUG Find Form actions in CompositeFields for access checks

This bug was introduced with the new nested CMS actions
around December 2012, but wasn't noticed until now
because checkAccessAction() would wrongly return TRUE
before the dataFieldByName() check was reached.
  • Loading branch information...
1 parent 37b8034 commit 16d0c188ee1fc27faa30cc7bf6dfc3b0dfef8d8b @chillu chillu committed Feb 18, 2013
Showing with 1 addition and 1 deletion.
  1. +1 −1 forms/Form.php
View
@@ -289,7 +289,7 @@ public function httpSubmission($request) {
$this->controller->hasMethod($funcName)
&& !$this->controller->checkAccessAction($funcName)
// If a button exists, allow it on the controller
- && !$this->actions->fieldByName('action_' . $funcName)
+ && !$this->actions->dataFieldByName('action_' . $funcName)
) {
return $this->httpError(
403,

0 comments on commit 16d0c18

Please sign in to comment.