This module now requires granted privileges for "create url aliases" under "path module" in "Access control", or no alias will be created while creating new node.

This means I have to open for user free editing of his content aliases, and it was never required so I consider it as a bug introduced.

Furthermore, even if user has "Automatic alias" checked (which is default), it will work with auto-creation of alias for new node in blog, but doesn't work for advanced poll -- I have to edit new advpoll as master user to get alias created.

To make it even more strange, if user with all required rights, even full rights to create/administer advpoll, will create new advpoll, not only there will be no alias created, but this user will not have access even via system URL node/123, until master user will just open/save the advpoll to get alias created -- and from this point original user has access to created advpoll also.

ALL above strange problems was introduced after last pathauto update (yes, I'm using latest/hottest code: datestamp = "1189037199")

Any ideas? I have tried (I think) everything: module uninstall/fresh install -- the same results.

Comments

greggles’s picture

Please only submit one problem per issue. You have two problems - the permissions problem and the advpoll problem. I'm only going to address the permissions issue - please create a new issue for the advpoll problems (though frankly I don't see how that's related).

I think this is probably a regression from http://drupal.org/node/170673 which makes complete sense.

I should have a fix for it later today if meatbites doesn't get to it first.

memtkmcc’s picture

Thanks for quick answer. Maybe this is in fact 2, not 1 issue, however, it was just my experience there was some reason to appear when creating advpoll nodes (and the "requirement" of enabling path/alias managing can be only part of the problem here), so only master user was able to save the advpoll and get related record in node_access table, but with enabled path/alias managing, even non-master user was able to re-edit advpoll node and get record in node_access table AND alias created by Pathauto - both. While with anything not related to advpoll (blog or any custom content type) the only "new requirement" was enabled path/alias managing -- without the need of re-edit to get the alias and record in node_access table created.

Therefore I decided to write about it all to give you better picture. I understand the Pathauto area is not for advpoll support and problems, and I'm not expecting it, I just hope it can be useful context information to find good answer for Pathauto itself.

Thanks again.

meatbites’s picture

Title: now requires granted privileges for "create url aliases" » Auto alias generation without explicit permission
Status: Active » Needs review
StatusFileSize
new792 bytes

This patch fixes the issue. We just need to add a permission check to nodeapi.

memtkmcc’s picture

Thanks!

it works perfectly, no longer enabling path/alias managing required, everything works as previously with blog and other content types, however advpoll still needs master user edit/save to get it to work.

Yes, it seems to be separate problem with advpoll itself, I will submit this to advpoll project issues.

Best.

greggles’s picture

StatusFileSize
new829 bytes

I think there's a "race condition" in that patch. How about this slight variation?

I haven't tested it yet, but the idea seems good.

meatbites’s picture

Yes, it does branch out more than necessary. I prefer your more elegant solution, Greg, which works perfectly.

meatbites’s picture

StatusFileSize
new795 bytes

Manually adding your solution, I missed the typo. Here's a patch with added bite. Oh, I went there.

greggles’s picture

Status: Needs review » Fixed

Great - fixed. Thanks meatbites!

Anonymous’s picture

Status: Fixed » Closed (fixed)