Currently, freelinking uses the following access check to see if a clicked link can be created by the user:

(user_access('create ' . variable_get('freelinking_nodetype', 'blog'))

This is broken in a lot of ways. It assumes how module-makers will title their access permissions. It also returns FALSE by default as there's no such permission as "create blog."

I'm working on a page to switch this to node_access, which is what Drupal wants us to use for this sort of thing.

Comments

eafarris’s picture

Status: Active » Closed (fixed)

Too old. I think the access check is done correctly now in 6.x-3.x.