Allow per-section CRUD permissions

There is, we would have to separate the 'edit' and 'delete' permissions for section editors.

You can do this now with an alter hook, by the way.

function custom_workbench_access_user_alter(&$access, $account) {
  // Remove the delete permission.
  if (empty($account->workbench_access)) {
    return;
  }
  $types = node_type_get_types();
  foreach ($access as $id => $data) {
    // YOUR LOGIC HERE (if needed)
    if (isset($access[$id]['delete'])) {
      unset($access[$id]['delete']);
    }
  }
}

Or by implementing hook_node_access() yourself.

Let's keep this as an open request.

Here's a start at advanced permissions. We may just want to change the data storage model in the user and role tables.

Note that the complexity of permissions means that we store a LOT of data. Up to 7 permissions per node type per user. That means the new {workbench_access_permission} table could get very large.

This suggests to me that it should be an optional feature. Perhaps in a submodule?

Note that this patch provides no UI for changing permissions.

This is against 7.x-1.x. See the git instructions tab on the project page.

It needs work. The data storage model (database schema) is not right.

Changing version.

+1, an important distinction.

This is partially fixed by #1216356: Reviewer roll with no edit permissions can edit and save draft of an article, which uncovered a dumb oversight in the permission handling.

Right, so that solves part of the problem.

Re-titling this issue more in line with the patch,

Lowering priority since there is a work around for now (see comment #2).