Problem/Motivation

Seems the old issue still active: #156028: Workflow nodes must always be published for access controls to apply

Long story short:
1. Assume in Drupal 6 (Pressflow 6.26.2) core permissions you grant user to edit own posts.
Then set workflow 2 states. First one - allow user to edit own posts. Second one - dont allow. Allow author see node in every state.
Note: Author can alway edit node - in every state. Should be able only in the first one.

2. Assume in Drupal 6 core(Pressflow 6.26.2) core permissions you grant user to only create posts but not edit own posts.
Then set workflow 2 states. First one - allow user to edit own posts. Second one - dont allow. Allow author see node in every state.
Note: Author can't edit node in any state. Should be able only in first one.

Result.
Can't set author to be able to edit own posts only in specific states - with or without core permissions.
Question.
Does using Grant Module solves the issue?

Proposed resolution

#1432832: Workflow access control does not work

Comments

elnico’s picture

elnico commented

Subscribing!

jgrossman’s picture

jgrossman commented

I am just starting using workflow to acomplish this exact same senario and have noticed the exact same issue? The expliantion and the way workflow reads it should work. But i get the same results. The auther can edit it in the states that they should not be able to.

jgrossman’s picture

jgrossman commented

I found the answer to this issue was having the edit own content permissions checked. That overrides the workflow permissions. So if you uncheck that permission the workflow will take over and work as expected. I also installed module grants.

Found info here http://drupal.org/node/1432832

thank you.

johnv’s picture

johnv
Primary language Dutch
commented
Component: User interface » Code
Category: Bug report » Support request
Issue summary: View changes
Status: Active » Closed (works as designed)

Seems this is fixed, then.