There is already a discussion regarding the D7 version but I want to raise it for D6 as well.
Here is the scenario:
1. User has permission to create and edit a particular Content Type.
2. The same Content Type is controlled by workflow access.
3. A node is created with Drupal status of "Published" and Workflow state of "Review".
4. From the Workflow Access the user is restricted from viewing and editing nodes in "Review" state.
5. Anonymous users are not able to see a published node in "Review" state, Workflow access applies permissions fine.
6. Author has complete access, ie. view and edit own previously written content in the Workflow state of "Review" even when is should have access denied by Workflow access.

Any ideas how to address this issue? Should I disable "edit own" within Drupal permissions and rely only on Workflow access? However, it seems that it is a design issue somewhere since anonymous permissions are applied successfully but author permissions not.

Comments

cristian.stoica’s picture

cristian.stoica commented

Quick update to add that disabling both the "view" and "edit" permissions then the permissions are applied correctly. However, enabling only the "view" permission grants "edit" too which is not desirable. To eliminate any doubt, the permissions have been rebuilt upon any subsequent change made.

Encarte’s picture

Encarte commented
Category: bug » support
Status: Active » Closed (works as designed)

If your problem is with the «Edit own content» permission, then its from design. That permission overrides workflows permission and shouldn't be set for content types with workflow. The same goes to «Edit any content». Both permissions are unnecessary for any content type with workflow.

jgrossman’s picture

jgrossman commented

Thank You. Exactly What I Needed!