With view_unpublished enabled and permissions configured so that a user who has permission to view an unpublished webform node cannot access that webform's results. This occurs even when a user has permission to access that webform's results via the, 'access all webform results' or 'access own webform results' permissions. This happens because webform calls node_access through a custom access callback (webform_results_access), thus view_unpublished's rewriting of node_access has no effect in the access check for webform results.

Comments

mthomas’s picture

Status: Active » Needs review
StatusFileSize
new2.9 KB

And here's a patch. I'm not sure if it's good practice to be rewriting other modules's access callbacks, but I don't really see an alternative in this case.

entendu’s picture

Issue summary: View changes
Status: Needs review » Closed (won't fix)

Deprecating 6.x.