Hey Daniel and everyone,

I'm enjoying the new module configuration provided on user reference fields, but I'd like to suggest that we change the default settings so that less are checked by default. This is important now that node access in D7 controls unpublished nodes (in addition to published nodes).

Currently, all three "author" settings are checked by default (view, update, delete). But such settings can inadvertently contradict core settings like the "view own unpublished content" permission. For instance, if the "view own unpublished content" permission is unchecked for a user role, but you have a user reference field already assigned to a content type (before you install the NAUR module), the act of installing the module will cause the node author to be able to suddently view his own unpublished nodes (probably without the site admin realizing it). This is especially problematic for user reference fields already present on the site (before you enable the module).

So I'd like to suggest that by default, the three "author" settings (view, update, and delete) are unchecked by default. This way, the module would have no effect on author node grants by default (whatever grants to authors by core and other modules would control) and the feature could be enabled if someone needed it.

One more thing: I'd even suggest that, by default, we uncheck the "View" checkbox for "Grants for referenced users". (Currently, this is checked by default.)

On a lot of sites I work with there are bunches of user reference fields that don't have anything to do with granting access to the node. It's more of a special feature on just a couple user reference fields when you happen to need it. So I think it would be better to "turn on" this feature (by checking the box) when it's required rather than having it be always on (and having to remember to turn it off). So I'm basically suggesting that all of the field configuration checkboxes be "unchecked" by default and then explicitly enabled when needed.

What do you think?

--Ben

Comments

danielb’s picture

Status: Active » Fixed

I've removed defaults from 6.x-3.x and 7.x-3.x and committed. Will appear in future versions.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.