If a user can edit a node, they should also be able to rollback to a particular revision, since rollback is only really an edit operation (a new revision is always created upon a rollback).

What the user *should not* be able to do is delete revisions. This is not a editing function, as it permanently deletes content which the user may not have created.

So, as it stands now, users with 'administer nodes' permission can rollback to a previous revision, and they can delete revisions.

Users with edit permission on a node can do neither.

I suggest we allow users with edit permission on a node to be able to rollback to a previous revision, but not be able to delete revisions. Only users with 'administer nodes' permission should be able to delete revisions.

Comments

clairem’s picture

clairem CreditAttribution: clairem commented

I think that I partially agree with wazdog, but it seems to me that node permissions need a more far-ranging review, and to be much more finely gained. Rather than hijack your thread, I have posted a separate feature request: More finely-grained node permissions

forngren’s picture

forngren CreditAttribution: forngren commented
Status: Active » Closed (fixed)

If someone wants this function, they can activate it.

dww’s picture

dww
we/he/they
CreditAttribution: dww commented

this was already added to core via http://drupal.org/node/62340 -- there's now a separate permission for "view revisions" and "revert revisions". you can only revert to revisions that you have permissions to edit. it all works great. ;)

so yeah, this is closed, because it's already fixed...