But what about, if anonymous users can preform C (R) UD actions? Post comments, create nodes.
Most of our sites do not have this setup, but it was a thought that I had, that I think needs to be adressed.

To have this work, no content changes should be allowed at all. Only read...

I'm thinking about ways to prevent, but can't come up with it.. Seems complex to also limit it in those scenario's.

Or maybe there should be a check in the module, if there are permissions set that allow anonymous CRUD and then do not allow this to be used.
That is not a solution, but anyway...

Wondering your thoughts

Comments

notzach’s picture

Hum, good points! I'll add those features to the module.

Thanks!
Zach

rup3rt’s picture

I use this -- it is an active project that covers the same ground

http://drupal.org/project/readonlymode

dave reid’s picture

Project: » Lost & found issues

This issue’s project has disappeared. Most likely, it was a sandbox project, which can be deleted by its maintainer. See the Lost & found issues project page for more details. (The missing project ID was 1090552)