diff options
| author | David Rothstein <drothstein@gmail.com> | 2014-07-24 16:22:00 -0400 |
|---|---|---|
| committer | David Rothstein <drothstein@gmail.com> | 2014-07-24 16:22:00 -0400 |
| commit | eb49a5dcdc034bae5d049a40c03531509e1c509a (patch) | |
| tree | 349bc2b7901b5aba40c6fd530954224ab60e3e93 | |
| parent | 3310afeb856564d2bc0c03512566bff60029d7be (diff) | |
| download | brdo-eb49a5dcdc034bae5d049a40c03531509e1c509a.tar.gz brdo-eb49a5dcdc034bae5d049a40c03531509e1c509a.tar.bz2 | |
Issue #2012468 by joshi.rohit100, blueminds, David_Rothstein, plach | catch: Add trusted roles recommendation to 'access site reports'.
| -rw-r--r-- | CHANGELOG.txt | 3 | ||||
| -rw-r--r-- | modules/system/system.module | 1 |
2 files changed, 4 insertions, 0 deletions
diff --git a/CHANGELOG.txt b/CHANGELOG.txt index 8ad68b43e..c118da47c 100644 --- a/CHANGELOG.txt +++ b/CHANGELOG.txt @@ -1,6 +1,9 @@ Drupal 7.30, xxxx-xx-xx (development version) ----------------------- +- Added a warning on the permissions page to recommend restricting access to + the "View site reports" permission to trusted administrators. See + DRUPAL-PSA-2014-002. Drupal 7.29, 2014-07-16 ---------------------- diff --git a/modules/system/system.module b/modules/system/system.module index d4f3bc47a..18d8a8870 100644 --- a/modules/system/system.module +++ b/modules/system/system.module @@ -242,6 +242,7 @@ function system_permission() { ), 'access site reports' => array( 'title' => t('View site reports'), + 'restrict access' => TRUE, ), 'block IP addresses' => array( 'title' => t('Block IP addresses'), |