Is it possible to add create and "deny others" (not referenced users) permissions? Would be really great!
I think the create permissions could be difficult... The referenced user should become create permissions for selected content types or the content type which referenced (selected content types at field settings from master node) to the "master node". Is it possible?

I try to replace og with reference modules because of some problems with OG D7 module...

Comments

danielb’s picture

It is not needed to add 'deny others' permission, because that's how it already works...

I think the create permissions could be difficult... The referenced user should become create permissions for selected content types or the content type which referenced (selected content types at field settings from master node) to the "master node". Is it possible?

I don't understand what you're asking for. Do you want the create permission for selected content types, or do you want create permissions for the type of node which is referenced? Do you need this at all or is this just a random idea that you don't actually need?

I want to talk to someone that has a legitimate use-case for a 'create' permission in this module, and a good explanation of why no other module is suitable for this purpose.

JohnnyX’s picture

Ok, I'll try to explain it ;)

1) Create permission
I build a group with references. User should not create content of a content type "global" but get create permission for the content type only with group context (as group content). Group content for example is article content type.
I reconsider my idea. Maybe I can do it another way.

2) View permission
All users should see the group (node), but NOT referenced group content. I try to remove view permission for group content without hide the group itself. But this should be done with a view and - if ported to D7 - Views ignore node permissions.

JohnnyX’s picture

2) View permission
All users should see the group (node), but NOT referenced group content. I try to remove view permission for group content without hide the group itself. But this should be done with a view and - if ported to D7 - Views ignore node permissions.
No port exists at the moment. Module would be a workaround to show the group name to all users (via a view) without give access to the referenced nodes.

Module works fine to hide or show both master node and referenced nodes.
My "problems" building groups with reference modules are

1) Only give referenced users view permission to the referenced nodes and NOT show the master node to the referenced users
2) Show the referenced nodes to referenced users but hide the master node for all users.

Any idea how to fix/ workaround it?

kukle’s picture

sub

danielb’s picture

I gotta say I didn't follow that at all. You pretty much lost me at "I build a group with references." which is the first thing you said :/ I have no idea what that means.

danielb’s picture

How about we just have an options like

Grant 'create' to referenced user for content types:
[ ] Page
[x] Article
[ ] Story
[ ] Product

And you tick the content types you want?

something like that?

JohnnyX’s picture

Hello danielb,

yes! That would really help me. :)

Thanks

kukle’s picture

And why not going deeper:
- give possibility to tick by taxonomy
- give possiblility to add dynamically referenced users as editor/moderator/publisher to a node
- ...

danielb’s picture

kukle, those sound like ideas that might need some more elaborate discussion, if you care to explain further please start some new issues, cheers.

JohnnyX’s picture

I try to build up a Google+ like "friendship"/ circle system with references und nodeaccess user | node reference. A simple test works fine (node = circle, referenced users are added to the circle and have view rights to the referenced nodes).

Go deeper could be interesting. But it should be simple to use for the members!
A feature with Google+ circles is to set visibility for circles and users with only one(!) input field.

danielb’s picture

This is actually more awkward to do than I thought, but I think I can make it work.

danielb’s picture

Status: Active » Needs review

I've committed a solution, give it a go see if it does the trick. It doesn't work the way the other grants do, so I can't use my usual ways to easily test it.

JohnnyX’s picture

You're really fast! :)

I'll do some tests during weekend.

JohnnyX’s picture

First short test...

Hide the "master node" and give referenced users view access to referenced nodes.

master node: "deny view" and grant update for referenced users
"slave" nodes: If user have update rights -> give view permission (not update!)

So "master" node is hidden and referenced nodes are visible.

Later I test the create content permissions...

JohnnyX’s picture

posted test at #14 doesn't work for me.

I try to hide the node and only give view permission for referenced users to referenced nodes... but NOT view permissions to the ("Master") node they referenced. Do you understand what I mean?

- Node have referenced users but is private (only owner can view)
- referenced users get view permissions to referenced nodes (but NOT to the "private node"...

danielb’s picture

Title: Add create and "deny others" permissions to node access user reference » Add create permissions

The posts #14 and #15 do not appear to describe an attempt to use functionality that this module actually provides? I.E. you cannot "give referenced users view access to referenced nodes" - that doesn't sound like what this module does.

The feature that was added for this issue was the 'create' permissions.

JohnnyX’s picture

Hm, I should open a new issue... first I explain it to you then we will see.

I use references with the nodeaccess user | node reference modules as alternative to og. Here a blog entry explain how it works.
http://nodeone.se/blogg/johan-falk/alternative-solution-to-organic-groups

The first node should be private! Only the owner should see. Here the other others are referenced. It works with nodeaccess_userreference module. The first node we call "circle".
Other nodes are referenced to one or more circles (nodeaccess_nodereference module) and so the node owner ca control access to the content.

All work fine with reference, nodeaccess_usereference and nodeaccess_nodereference so far, BUT the referenced users see the "circle" node which should be hidden/ not accessible...

I can't deny access to circle without deny the access to the later referenced content. Also set circle to unpublished doesn't hide it from other (referenced) users...
Do you understand what I mean and try to build?

danielb’s picture

Status: Needs review » Fixed

I think I understand what you're trying to do, but you have it totally backwards, unless you're not explaining it right.

1) Create a content type called 'circle'
2) Add a user_reference field on 'circle' type and set up nodeaccess_userreference to give referenced users 'view' access to the current node.
3) Create a circle node and reference the users you want to be in on the circle.
4) Create a content type called 'circle item' (this represents other pages within the circle - you can several such content types for different stuff)
5) Add a node_reference field to 'circle item' type which can reference only 'circles', and set up nodeaccess_nodereference to pass on view access when they can view a reference.
6) Create a 'circle item' and set it's node reference to be the 'circle'.
7) The users referenced in the circle should now have access to the circle item created in step 5.

Anyway, I'm marking the create feature as fixed as no doubt the issue will resurface if there is any problem with it.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

timofey’s picture

Here's how I use it:

  • I have a content type, called "Groups", with user_reference.
  • Users on my site can create a Group item, i.e. Travel, Hiking, Swimming, etc... and reference users (mods)

  • I have a content type, called "Blog", with node_reference.
  • Users on my site can create a Blog items, i.e. 99 Reasons to Travel, How to Swim, etc... and reference the node (their group)

As a result, the Blog item only appears under the Group item, i.e. "99 Reasons to Travel" can be seen under Group "Travel".

Features lacking:

  • Limit users to only provide Blogs for their Group, i.e. ability to only reference node (blog item) to the node (group item) of which I am referenced. Example - If I'm referenced in Group->Travel, I can only post Blog->99 Reasons to Travel under Group->Travel, not to any other groups.
  • Assign roles/permissions to the user_reference field, per user. In other words, the creator of the Group->Travel can have the "admin" role, with an ability to add (reference) users to the group with "mod" role (less permission).
timofey’s picture

Status: Closed (fixed) » Active
danielb’s picture

Status: Active » Closed (fixed)

The create permissions feature was added, the issue settings are meant to reflect this, please don't change them unless the implementation was wrong.
I'm not sure your comments even make sense for *this* module, but if you want to explain in more detail why they do, then start one issue per request.

JohnnyX’s picture

Features lacking:

Limit users to only provide Blogs for their Group, i.e. ability to only reference node (blog item) to the node (group item) of which I am referenced. Example - If I'm referenced in Group->Travel, I can only post Blog->99 Reasons to Travel under Group->Travel, not to any other groups.

I have a similar problem also with builded "groups" (done with referenced nodes/ users). All users can choose all groups but they should NOT post in foreigner groups... Maybe it's no feature for this module and should implemented to the widget (for example autocomplete widget) to reduce the available groups/ nodes to own groups/ nodes...

timofey’s picture

I second JohnnyX! Exactly the same issue here.

timofey’s picture

FYI, I've created a new issue on this request http://drupal.org/node/1295370

timofey’s picture

Issue summary: View changes

Updated description...