I have paypernode purchasers added to a group upon succesful Ubercart checkout using rules.

Problem is any member of that group/role can edit anyone elses Paypernode.

Perhaps I'm missing something obvious.

Under permissions > pay per node section: 'edit own pay-per-node products' is checked
Under permissions > node module: 'edit own ppn_content' is checked

Under Content Types > /admin/content/node-type/ppn/nodeaccess: above role can edit. If I remove this no one can edit thier own Paypernodes.

Thanks.

Comments

maurizio.ganovelli’s picture

maurizio.ganovelli
he/him
Primary language Italian
Location Arezzo
commented
Component: Miscellaneous » Code
Assigned: Unassigned » maurizio.ganovelli
Status: Active » Closed (works as designed)

I think that node_access and paypernode modules work as designed: node_access seems to limit access by role, without take in account the node author. You can try another node access module like content_access to achieve this result but is not strictly necessary for paypernode. You can simply assign to a role the permission to "edit own [node-type] content".