Hi:

I have a og role with view revisions and revert revisions permissions.
When a user views a node (xx) inside a group in which he has this role, he can see the revisons tab but when he clicks and goes to url node/xx/revisions, he gets a "permission denied" error.

Many thanks, great work!

Comments

somebodysysop’s picture

Assigned: Unassigned » somebodysysop

he can see the revisons tab but when he clicks and goes to url node/xx/revisions, he gets a "permission denied" error.

Is the url "revisions" or "revision"?

neurojavi’s picture

it's "revisions" like in

node/1/revisions

somebodysysop’s picture

Status: Active » Needs review
StatusFileSize
new8.83 KB

Apply this patch against a clean download of OGR release 2.6. Let me know if this resolves the issue. Thanks.

neurojavi’s picture

Perfect!!

I've tested the patch and now I can see the revisions list, view previous revisions and revert to previous revisions. All works fine.

Many thanks!

somebodysysop’s picture

Version: 5.x-2.6 » 5.x-2.7
Status: Needs review » Fixed

Patch code now included in latest OGR release.

Anonymous’s picture

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.

pdcarto’s picture

Version: 5.x-2.7 » 6.x-4.x-dev
Status: Closed (fixed) » Active

If Access denied for node revisions (node/%/revisions) was fixed in 5.x, I'm sorry to say that it has returned in 6.x-4.x, so I'm reactivating this bug report:

  • D6.13 - clean install with og+ogur, views etc
  • ogur 6.x-4.x-dev dated 2009-Jul-01

I first encountered the the "access denied" bug for editing in a fairly bulked-up development instance (lots of modules, lots of data) when I was experimenting with using ogur for the first time. For testing ogur, I set up a clean instance with a new D6.13 install and minimal modules (og+ogur, views). The access denied error for _editing_ did not appear, however the access denied error for _viewing revisions_ did.

I added a print_r($user->roles) before and after `og_user_roles_grant_roles`, and the appropriate role *is* being granted, even though access is denied (I found this in my earlier investigations on the node/%/edit access denied problem as well).

pdcarto’s picture

With respect to the previous comment, here are all the modules I have enabled in my ogur test instance:

admin_menu
block
book
color
comment
contact
dblog
filter
help
menu
node
og
og_user_roles
og_views
path
php
profile
search
statistics
system
taxonomy
trigger
update
user
views
views_ui

pdcarto’s picture

Assigned: somebodysysop » Unassigned

Somebodysysop is not the maintainer for 6.x-4.x - unassigning

sun’s picture

Version: 6.x-4.x-dev » 5.x-2.7
Status: Active » Closed (fixed)

...and this bug report was filed against a very old version that is completely different to 4.x today. Reverting status.