By dundun on

In a Drupal moderated site users can bypass comment moderation if some days after comment approval they decide to edit their own comments.

The solution is provide a "edit own comments" option under permissions.

Otherwise those users could eventually make the Drupal site editor liable for comments in fact he didn't approve.

There was a working patch against 4.7.x development branch but it stopped working from 4.7.3 on.

I thought this improvement will be present at 5.x branch but surprisingly it isn't.

Any ideas? I desperately need such a permission on my site.

Thanks in advance.

Comments

deavidsedice’s picture

deavidsedice commented

Hey, I think I can help you with your site.

You can write a small module that blocks comment updates. This isn't a great solution, but, in your case it will be useful, I think.

http://api.drupal.org/api/4.7/function/hook_comment

An example...

Write a file, called: noeditc.module

In this file, something similar to this:


function noeditc_comment($a1, $op)
{
  switch($op)
  {
    case "update":
      if (!user_access("put_here_an_admin_access"))
      {
         return drupal_access_denied();
      }
    break;
  }
}

It is very very very simple, and can be useful for your site.

(I haven't tested this. Don't try in production sites.)