Using Drupal 5.2 and MySQL

I have concluded that the only combination that achieves Access Control based on Taxonomy is to Deny ALL for "authenticated user" role and then allow what I want for the Custom Role. Is this how the module is supposed to work or am I missing something?

Even if User X does not belong to the "authenticated user" role, if everything is allowed for the "authenticated user" role, then User X can access eveything as well.

Comments

sgriffin’s picture

sgriffin commented

You only need the default to by deny for on category applicable to that content type.. everything else ignore.

Of course, if you don't deny access first, they will have access since its granted by default, unless its further denied in Access Control

xjm’s picture

xjm
she/her
Primary language English
commented
Status: Active » Closed (works as designed)