Posted by grokdesigns on December 26, 2007 at 6:27pm
Jump to:
| Project: | Private Number |
| Version: | 5.x-1.0 |
| Component: | User interface |
| Category: | support request |
| Priority: | normal |
| Assigned: | John Money |
| Status: | closed (fixed) |
Issue Summary
Is there a way to prevent ALL users (including Admin), except the original author, from viewing the private number content?
Comments
#1
By design, private number will only show for roles that have the "View private number" access permission. If no roles have this permission, then no users will be able to view the private number, including the Admin. The author, however, will always be able to view their own private number when editing the node. Otherwise, it is displayed as "Ending in XXX" even to the author.
I believe this is the preferred way of doing it. Take a look at any ecommerce site (Amazon, eBay, et al) and if you have a credit card on file, it will never be shown in plain text unless editing the card number. If this doesn't make sense, feel free to reopen the issue.
#2
I followed your suggestion and removed the "view private number" permission from all roles, but am still able to view it as admin. Is there something else that I need to configure?
Thanks,
Chris
#3
Fixed in release 2.0
http://drupal.org/node/425596
#4