Closed (works as designed)
Project:
Image
Version:
6.x-1.0-alpha4
Component:
image_gallery
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
28 Jan 2007 at 23:20 UTC
Updated:
22 Nov 2009 at 19:21 UTC
Even as an anonymous user with no permissions for images in the anon role, the Image gallery link still appears in the Navigation menu. Seems like that link should not be generated for users who do not have access to image galleries at all.
Comments
Comment #1
drewish commentedmarked http://drupal.org/node/114614 as a duplicate
Comment #2
sunStill an issue in 6.x.
Comment #3
joachim commentedLooks fine to me:
We don't supply permissions for viewing galleries, so 'access content' is the best that applies.
@sun: by design?
Comment #4
joachim commentedClosing this as by design:
- this module is essentially a taxonomy module. Core taxonomy doesn't do access permissions so we don't either.
- even if we did add a permission to access the galleries menu item, it would be rather pointless as a user could still go to 'taxonomy/term/$tid' and see listing of the nodes for the gallery, albeit not in quite the same display.
- if you want to restrict access to the gallery listing, Views will allow this: see #405456: Galleries made with views
Comment #5
joachim commentedSee http://drupal.org/project/image_gallery_access
Comment #6
salvisUnless you're using an access module, there's no way to restrict access to image galleries. Access to images is controlled by access content, so #3 works correctly.
However, this will change, when #44057: Use core-style content permissions is committed: if a user cannot see images, they shouldn't get the 'Image galleries' menu item, even though they might still be able to see empty taxonomy/term/TID pages. Maybe we shouldn't close this just yet?Image Gallery Access controls both access to galleries as well as to image nodes, but it does not currently remove that menu item for users that can't see any gallery at all. See #543576: Hide the 'Image galleries' menu item for roles that can't see any galleries...
EDIT: Never mind about the effort to implement the core permissions — access content is the only permission that affects viewing.
Comment #7
salvisImage Gallery Access RC1 handles this correctly now, both for 'Views' and 'non-Views' galleries.