User should be able to edit node and he cannot [#1238742]

ACL 6.x-1.3
Content Access 6.x-1.2
Drupal core 6.20
MySQL 5.1.58-community-log

User 538 should be able to edit node 60 and he cannot. There is no edit menu option and browsing to https://dot-nxt.com/node/60/edit returns "Access denied"

User 538 is not in a role with edit access, but I added User 538 to the Grant Update Access list for the node and he is listed in the User Access Control Lists for Grant Update Access on the node access page.

"Enable per content node access control settings" is checked for the content type.

I removed this user from Grant Update Access, re-added him then ran rebuild permissions. I still have the same problem. I used to devel to flush all caches and no change.

Below is the result of sql queries I ran against the site database:

SELECT n.*, 'acl' AS realm, n.acl_id AS gid, a.module FROM drp_acl_node n 
INNER JOIN drp_acl a ON n.acl_id = a.acl_id WHERE nid = 60

returns:

"acl_id"	"nid"	"grant_view"	"grant_update"	"grant_delete"	"priority"	"realm"	"gid"	"module"
"217"	"60"	"1"	"0"	"0"	"0"	"acl"	"217"	"content_access"
"218"	"60"	"0"	"1"	"0"	"0"	"acl"	"218"	"content_access"
"219"	"60"	"0"	"0"	"1"	"0"	"acl"	"219"	"content_access"

acl_node:
"acl_id"	"nid"	"grant_view"	"grant_update"	"grant_delete"	"priority"
"218"		"60"	"0"		"1"		"0"		"0"

I have attached screen captures of:
- devel node access blocks for node 60
- node 60 access control settings
- node access summary page
- user 538 roles settings
- a list of all modules in the module directory

File	Size	Author
all_modules.txt	1.13 KB	Phil.Hersh
user 538 roles.png	11.94 KB	Phil.Hersh
node access summary.png	23.26 KB	Phil.Hersh
access control settings.png	70.82 KB	Phil.Hersh
devel-node-access.png	64.65 KB	Phil.Hersh

Comments

Comment #1

Phil.Hersh commented 4 August 2011 at 00:11

User is in a role with access to Full HTML filter.

As a test I added the user to a role which should have edit access to the node, rebuilt permissions and there is still no edit access.
I removed user from Grant Update Access but left him the role with edit permission and still no edit access.

Comment #2

toddjh commented 4 August 2011 at 21:22

I don't use ACL, but I did run into an identical problem today. I traced it back to a typo in one of my modules, where I was implementing hook_menu to override the standard "/node/%node/edit" path, but accidentally passing node_access() the nid instead of the node object itself. Any chance something like that could be the case for you?

Even if that's not it, the fact that node_access() is returning TRUE strongly implies the problem lies in the menu system somewhere. I can't think of another reason the Edit tab could be missing under these circumstances.

Comment #3

salvis

he/his

commented 4 August 2011 at 21:52

Project:	ACL	» Content Access
Version:	6.x-1.3	» 6.x-1.2

Unfortunately, the DNA blocks are clipped (the update column in the first block is missing).

What's the name of user 538? It would be good to see the full DNA blocks as user 538 sees them, with the mouse hovering over the cell for user 538/update.

ACL's responsibility ends when there's a green YES in the corresponding cell in the second DNA table. If things are as I think they are, then ACL has fulfilled its obligation. Try this out on a test system with only ACL and CA installed. I suspect that some other module is interfering.