From 0539f5483bb9e0fb8d1f74be3d146ed95d4d0671 Mon Sep 17 00:00:00 2001 From: Steven Wittens Date: Mon, 13 Mar 2006 21:33:18 +0000 Subject: - sa-2006-001: Custom menu items are accessible to anyone --- includes/menu.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'includes') diff --git a/includes/menu.inc b/includes/menu.inc index 85511bff5..4f43f0afa 100644 --- a/includes/menu.inc +++ b/includes/menu.inc @@ -1073,7 +1073,7 @@ function _menu_build() { else { // It has a permanent ID. Only replace with non-custom menu items. if ($item->type & MENU_CREATED_BY_ADMIN) { - $_menu['items'][$item->mid] = array('path' => $item->path, 'access' => TRUE); + $_menu['items'][$item->mid] = array('path' => $item->path); } else { // Leave the old item around as a shortcut to this one. @@ -1085,7 +1085,7 @@ function _menu_build() { else { // The path was not declared, so this is a custom item or an orphaned one. if ($item->type & MENU_CREATED_BY_ADMIN) { - $_menu['items'][$item->mid] = array('path' => $item->path, 'access' => TRUE); + $_menu['items'][$item->mid] = array('path' => $item->path); if (!empty($item->path)) { $_menu['path index'][$item->path] = $item->mid; } -- cgit v1.2.3