Parts of the front end to be viewed only by Admins are appearing to the public. The ACL just is not working as expected.
I created a new access level to view form submissions. The information submitted is very sensitive and cannot be emailed to the admin for security reasons, yet the entire RSForm directory is available to the public.
I want to point the finger at RSForm, but I put the link to that directory in a module and assigned it to the admin group. It still shows up. I can see it when I use Incognito mode!
Mind you, I performed this upgrade nearly from scratch. I started with a fresh install and built back from there, but there have been numerous issues I continue to iron out, such as links to existing pages generating 404s. I'm fixing those by creating menu items, which I never had to do before.
This has been a horrible upgrade process for me. What is up with the ACL?
I created a new access level to view form submissions. The information submitted is very sensitive and cannot be emailed to the admin for security reasons, yet the entire RSForm directory is available to the public.
I want to point the finger at RSForm, but I put the link to that directory in a module and assigned it to the admin group. It still shows up. I can see it when I use Incognito mode!
Mind you, I performed this upgrade nearly from scratch. I started with a fresh install and built back from there, but there have been numerous issues I continue to iron out, such as links to existing pages generating 404s. I'm fixing those by creating menu items, which I never had to do before.
This has been a horrible upgrade process for me. What is up with the ACL?
Statistics: Posted by roadsider — Wed Apr 03, 2024 8:00 pm