I've just noticed that when I use search like an anonymous user within my Drupal v5.2 installation, and when I enter a term that already exists in a Webform Report (indexed) node, then Drupal's search will list it within the search results no matter if the Webform Report is accessible for the anonymous user or not?! I think the problem might be deeper than I expected.

Comments

klance’s picture

klance commented

Confirmed. I noticed that a few days ago, too. I thought setting the view permissions in the module would prevent its nodes from being listed to unauthorized users anywhere, but that doesn't seem to be the case. Looks like I might have to add search-specific permissions. Thanks for reporting this.

klance’s picture

klance commented

Not so bad. I had to add a separate generic Drupal hook function to handle the listing of node titles in lists and search results. I tested it on both Drupal 4.7 and Drupal 5.2 and the titles in question are no longer listed to unauthorized users. Committed to DRUPAL-5 and DRUPAL-4-7.

klance’s picture

klance commented
Assigned: Unassigned » klance
Status: Active » Fixed
jazzitup’s picture

jazzitup commented
Status: Fixed » Closed (fixed)

Excellent! Thanks, klance!