The permissions settings for node reference do not respect the permissions of the user since they have a hard coded "NODE_PUBLISHED" check for "status".
This creates a problem for creating draft content for review / development. The unpublished content does not show up in the rendered form.
We have a permission for viewing unpublished content (for content creators and reviewers) and node reference should respect this. If the user can see the content otherwise, it should render when it is a field.
I will attach a patch in the next comment where I have removed this line to fix the issue.
| Comment | File | Size | Author |
|---|---|---|---|
| #2 | references-view-unpublished-content-1555236-2.patch | 714 bytes | spleshka |
| #1 | references-render-unpublished-content-1555236-1.patch | 782 bytes | damontgomery |
Comments
Comment #1
damontgomery commentedHere is the patch.
Tested with Drupal 7.12 and 7.x-2.0 of References.
Comment #2
spleshkaI've got similar bug: every user can choose unpublished nodes in select list. It is wrong! Here is another patch that solves this problem.
Comment #3
GrandmaGlassesRopeMan#1: references-render-unpublished-content-1555236-1.patch queued for re-testing.
Comment #4
GrandmaGlassesRopeMan#2: references-view-unpublished-content-1555236-2.patch queued for re-testing.
Comment #5
damontgomery commentedThis seems to be fixed in 2.1 since the change causing the issue was reverted.