I have a 'workflow summary' link in the navigation menu for a user-role that isn't supposed to be able to access the workflow summary. All this user is supposed to be able to do is create content in a 'pending' state so that someone else can move it to 'published'.

I've unchecked all boxes in the workflow user permissions (and I mean all booxes for all users), flushed the cache and rebuilt the permissions, yet all users can still access the summary page. It's like the permissions system is being completely ignored by the module.

Any suggestions?

Comments

chianti’s picture

chianti commented
Status: Active » Closed (works as designed)

Apologies. I didn't realise that the summary pages were in fact Views.
Of course, the problem was that my site was set to allow everyone to access all views.

Cheers.