Skip to content

Changes

Started by Ian
Started 19 hr ago
Took 12 sec
cms/openedit: relax toolbar view permissions (embedded in the core app)

toolbar/admintoolbarselector is included in ordinary app pages for every signed-in user,
so requiring administrators made those includes redirect (broken pages / redirect loops).
The toolbar is read-only, and admintoolbarselector already self-gates on
canView(/openedit/_site.xconf). Keep the write paths (components/html editor/filemanager)
administrators-only.
ian at