Currently, when a user does not have access to create or edit a feed, they are denied access if they click on the feed link at the bottom of each feed item.
The proper behavior would be to remove the feed link instead, so that users without feed access will not see the link at all.
Also, feed teasers are still visible to users who have no access rights. When they click on the feed link, they get access denied, but the feed teaser already shows all the critical information. The proper behavior would be to hide feed nodes from users that do not have access rights.
| Comment | File | Size | Author |
|---|---|---|---|
| #3 | access_rights_sf.jpg | 30.66 KB | zoon_unit |
| #2 | links_screengrab2.jpg | 47.57 KB | zoon_unit |
Comments
Comment #1
m3avrck commentedCan you please clarify *which* links are being shown to users they shouldn't?
Comment #2
zoon_unit commentedSorry, I haven't been checking my issue updates lately. I'm currently using an older version of simplefeed (waiting on the database upgrade feature) so maybe this has been fixed already. See attached image for greater clarification of links.
Comment #3
zoon_unit commentedFurther clarification: Here are my access rights for admin and anonymous.
Comment #4
m3avrck commentedA few notes...
Update SQL is here: http://drupal.org/project/simplefeed -- the 1.0 update stuff is for versions AFTER 1.0 is released, till then there will not be any provided database updates... only from 1.0 to 1.1 or 2.0 -- be sure to run that sql if you want to make it to 1.0.
You can use http://api.drupal.org/api/function/hook_link_alter/5 to remove any links on teaser if you want.
The access denied does look like a bug and I'll see what I can do.
Comment #5
m3avrck commentedthis is fixed -- simplefeed should not be overriding view access since it's not a node access module. everything works like it should, if you need to restrict access try a node access module.
Comment #6
(not verified) commentedAutomatically closed -- issue fixed for two weeks with no activity.