If a menu item points to a node controlled by Taxonomy Access Control, it would make sense for the menu to just reflect that node's permissions as already assigned by TAC. It is unlikely that one would ever need to assign different permissions to the menu item:

  • If the menu item allowed more roles than the node to which it points, then some users would get access denied errors.
  • If the menu item had fewer roles than the node to which it points, then you would be practicing security by obscurity, which is not true security.

Right now I am making double effort by modifying access permissions on the node and on the menu item. Not only does this take more time, it is more error prone because it could allow either of the above problems to occur.

Comments

fago’s picture

fago
Primary language German
Location Vienna
commented
Title: Automatically reflect Taxonomy Access Control's restrictions » Automatically reflect node access

yeah. that would be nice - but it would better be done as core patch.. (if it is not already in HEAD).
although, if someone would contribute a patch, which detects node paths and adds node access support, I'd be happy to include it.

aren cambre’s picture

aren cambre commented
Version: 5.x-1.x-dev » 6.x-1.x-dev
AlexisWilke’s picture

AlexisWilke commented

Aren,

As far as I know, in 6.x it works like that in the system. Did you have problems with TAC adding menus that should not be there?

Can you give me a complete setup description of what does not work for you?

Thank you.
Alexis

aren cambre’s picture

aren cambre commented
Status: Active » Patch (to be ported)

That is satisfactory. I'll mark fixed.

aren cambre’s picture

aren cambre commented
Status: Patch (to be ported) » Fixed

Oops!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

yngvewb’s picture

yngvewb commented

Hmmm, am I missing something here? taxonomy term pages do no reflect TAC settings in my menus

AlexisWilke’s picture

AlexisWilke commented
Status: Closed (fixed) » Active

The TAC should reset the nodes permissions, but maybe that could be the problem.

Try resetting your permissions with: Administer » Content management » Post settings

And click on the Build permissions.

Let me know whether that works or not.

Do you have other modules that offer Grants? (i.e. Domain, Organic Groups, To do...) If so, you may have one of those modules giving a positive answer for those nodes.

Thank you.
Alexis

AlexisWilke’s picture

AlexisWilke commented
Status: Active » Fixed

I'll mark this fixed again. 8-)

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.