node_object_prepare() should not assume the present logged-in user.

  if (!isset($node->nid) || isset($node->is_new)) {
  // ...
    global $user;
    $node->uid = $user->uid;
  }

Looking more into this, it assumes a lot. The function says it is for edit forms but it still seems very useful for programmatic node creation- should it be refactored?

Comments

pillarsdotnet’s picture

pillarsdotnet commented

If you are creating a node on behalf of another user, why not just change the $node->uid property after creation?

Status: Active » Closed (outdated)

Automatically closed because Drupal 7 security and bugfix support has ended as of 5 January 2025. If the issue verifiably applies to later versions, please reopen with details and update the version.