What are the effects of granting these permissions? What is meant by 'editable'? What scope of content do these permissions affect?

- Unpublish editable content
- Publish editable [content type] content
- Unpublish editable [content type] content

These are not documented on the project page, nor via the UI, nor in the readme.

Thanks,

Bob

Comments

robcarr’s picture

Priority: Major » Minor
Status: Active » Needs review
StatusFileSize
new547 bytes

A node is editable if the user has the relevant permissions to edit that node in the permissions table. Note that the node must have also fields in a format that the current user can edit. So if a node contains (for example) a long text (or body) field that has had a 'Full HTML' filter applied to its content, then only users who have access to the 'Full HTML' filter can edit the node. Having a 'developer-only' text format is a good way of keeping certain pages completely locked from content editors. Play around: Drupal only renders the 'Edit' tab on a node if the user has complete edit permissions for that node.

So the safest permission to grant is the (un)publish editable content, so that the relevant users can only change the status of nodes that they can edit. Just make sure you fully understand the impact of Text Filters and which users/roles can use them - look at /admin/config/content/formats in your site. Catches everyone out once in a while.

Added extra line in documentation in patch

simon georges’s picture

Version: 7.x-1.0 » 7.x-1.x-dev
Status: Needs review » Fixed

Committed, thanks!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.