OK. After a few days of looking at issues and getting down and dirty with node_privacy_byrole, the module has been tagged and is ready for Drupal 4.6.

To upgrade, you will need to run the script node_privacy_byrole_upgrade.php which is available in the CVS directory for this project:

http://cvs.drupal.org/viewcvs/drupal/contributions/modules/node_privacy_...

This file is a stripped-down modified analogue of the upgrade for events.

In short, it (along with changes to the module itself) takes care of the nasty problem where roles who've been de-selected for view/edit permissions for a particular node won't see the node in a listing of teasers (or any listing of nodes) but were still able to enter the URL directly and still see the node, if they happened to know the exact nid.

User's are strongly encouraged to run the script and upgrade to avoid this problem. After reviewing several of the reports of the module not working properly for certain node types, it has come to my attention that a lot of specialized node modules (i.e., node modules that are not a part of Drupal core) incorrectly override the node_access function with their hook_access. I didn't realize this myself and was totally mystified by those reports. So, in short, future reports should include the node type when reporting that NPBR doesn't work for some reason.

-Ankur

Comments

Anonymous’s picture

(not verified) commented