Commit a4636052 authored by catch's avatar catch
Browse files

Issue #1198120 by ravi.shankar, Jody Lynn, mdupont, Everett Zufelt, borisson_,... 

Issue #1198120 by ravi.shankar, Jody Lynn, mdupont, Everett Zufelt, borisson_, quietone: "Edit own " nodes permission for anonymous users is misleading and dangerous

(cherry picked from commit 82cf652a)
parent 54044f05

core/modules/node/src/NodePermissions.php

+2 −0
Original line number Diff line number Diff line
@@ -43,12 +43,14 @@ protected function buildPermissions(NodeType $type) { 
      ],

      "edit own $type_id content" => [

        'title' => $this->t('%type_name: Edit own content', $type_params),

        'description' => $this->t('Note that anonymous users with this permission are able to edit any content created by any anonymous user.'),

      ],

      "edit any $type_id content" => [

        'title' => $this->t('%type_name: Edit any content', $type_params),

      ],

      "delete own $type_id content" => [

        'title' => $this->t('%type_name: Delete own content', $type_params),

        'description' => $this->t('Note that anonymous users with this permission are able to delete any content created by any anonymous user.'),

      ],

      "delete any $type_id content" => [

        'title' => $this->t('%type_name: Delete any content', $type_params),