Although "Authored By" user of an Organic Group changes, this user still has edit permissions
| Project: | Organic groups |
| Version: | 5.x-3.1 |
| Component: | og.module |
| Category: | bug report |
| Priority: | minor |
| Assigned: | Unassigned |
| Status: | active |
Jump to:
Hello,
When I change the author of an organic group by changing the "Authored By" field, the previous author user is still able to edit the organic group as if they were still the author. Every time I keep changing the author, whatever username was an author still has admin privileges. For example, for one organic group I set the author to "basura" and then "test" and then "gmayes" and then back to "admin". "basura", "test", and "gmayes" can still edit the organic group when "admin" is the only author listed. This seems to be verified by the og_uid table which keeps rows of every user that was ever an author and has the "is_admin" bit set:
+-----+---------+-----------+----------+-----+-----------+------------+------------+
| nid | og_role | is_active | is_admin | uid | mail_type | created | changed |
+-----+---------+-----------+----------+-----+-----------+------------+------------+
| 28 | 0 | 1 | 1 | 12 | 0 | 1184279862 | 1184625662 |
| 28 | 0 | 1 | 1 | 1 | 1 | 1184175675 | 1184625696 |
| 28 | 0 | 1 | 1 | 13 | 1 | 1184291435 | 1184625685 |
| 28 | 0 | 1 | 1 | 11 | NULL | 1184625645 | 1184625645 |
+-----+---------+-----------+----------+-----+-----------+------------+------------+
10 rows in set (0.00 sec)
Is this to be expected?
Thank you, Geoff
#1
interesting ... the problem is, some people will want the current behavior where the old manager automatically becomes an admin and others won;t. i lean toward fixing this, but i'll accept input from others.
#2
i'd consider this a bug.
#3
Hi Moshe,
It is wonderful how active you are in developing OG. I'm very appreciative of all that you have done for drupal and OG.
I'm trying to set up different groups of authors for different organic groups so that these author groups can administer their own organic group. I'm sure that the best solution to my goal is to create a user group and then make that group the author (or somehow get user reference fields in cck to work with OG?). This way the information is modularized and centralized so maintenance is easy. I don't know how to do this yet, so I'm also thinking I could exploit this current issue/bug/feature and just change the author every time I need to add an administrator to a group. This feels, however, like I'm definitely not using drupal or the module as it is supposed to be used.
And, in my usage, I can foresee that this would be a problem (which is why I submitted this issue) because an employee could leave the company and I won't be able to remove them as a group author (unless I delete their table row manually). Also, in theory, the og_uid is set to either stay the same size or grow, but never shrink, which I'm guessing is in a just barely related and abstract way akin to a memory leak.
Just my two cents about how this issue relates to my use of OG. Regards, Geoff
#4
Ahhh, I just realized that the admin, and subsequently any additional admins of an organic group, can create/remove admins very easily from the subscribers page. I commented this subscribers link out initially in order to hide as much information from my users as possible. Maybe I should tinker with everything first before disabling it! So please disregard the ramblings of my last update.
This sort of changes things a bit now that I know how easy it is to administer the admins of a group. This really is quite a minor issue now, huh?
#5
#6