Closed (fixed)
Project:
Facebook OAuth (FBOAuth)
Version:
7.x-1.1
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
10 Oct 2011 at 19:29 UTC
Updated:
29 Oct 2011 at 20:20 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #1
areynolds commentedCould this be because of the "access content" permission requirement on the Menu API definition for the FB action links?
I can identify three major use cases regarding registration permissions and fboauth:
If we eliminate the access content requirement for fboauth actions, we satisfy the first two cases. As long as fboauth respects Drupal core's handling of login procedures (i.e. the settings regarding who may create an account in Account Settings), it should satisfy the last case as well. However, I don't believe that it does.
Would eliminating the access content requirement and bringing fboauth inline with Drupal's default handling of login cases fix the problem, or just create more?
Comment #2
quicksketchThere's definitely no problem with eliminating the access check, let's take that approach.
Comment #3
areynolds commentedOk, patch just takes out the access content requirement, maybe @steve.klingele could test it out?
I opened a new issue so we can work on ways to force fboauth to respect Drupal's user creation settings: http://drupal.org/node/1305784
Comment #4
steve.klingele commentedUnfortunately that patch doesn't help by itself. However if I also add this callback requirement (adopted from the fbconnect module)
'access callback' => 'user_is_anonymous',the user account is created and access is granted.Comment #5
quicksketchThe access callback needs to return TRUE even if the user is logged in, since you can bind a FB account to your account through the same button. Other actions that might be written in the future through the API (invite my friends, import photos, etc.) would also need the path to be available for authenticated (and anonymous) users.
In Drupal 6 you could just set "access callback" => TRUE, and it would grant access all the time to everything (which is what we want). But I'm not sure that approach works in D7.
Comment #6
areynolds commentedNo, I think you're right @quicksketch, it still works that way on D7. For some reason I thought it defaulted to TRUE and was optional. Here's the updated patch.
Comment #7
areynolds commentedComment #8
steve.klingele commentedThanks - that patch worked.
Comment #9
quicksketchThanks guys, committed to both branches.