Snog
Well-known member
- Affected version
- 2.0
Like the title says, the canView permission for the node is not checked when a forum is viewed.
This can be checked by just adding this to the node entity at the beginning of the canView function and pasting a direct link to a forum in the browser:
The canView function is never called.
This leads to having to extend the assertViewableForum in forum.php. There may be other things that need to be extended to account for that, but I'm not sure.
This can be checked by just adding this to the node entity at the beginning of the canView function and pasting a direct link to a forum in the browser:
Code:
$data = $this->Data;
print_r($data);
die();
The canView function is never called.
This leads to having to extend the assertViewableForum in forum.php. There may be other things that need to be extended to account for that, but I'm not sure.