Hi,

I noticed users whose permission is set to not access site notes have a link to create content for the site note type.

The link leads them to an access denied page since they don't have permission, this seems a little unnecessary.
Is it possible to have a "Create Site Note" permission? Similar to CCK content types.

Thanks,
Drew

Comments

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

The menu item to create the site note has "access site notes" as the permission, so it shouldn't be showing up.

drew reece’s picture

drew reece commented

That's what I thought, but it still shows up for the role 'Moderators'.

I don't have any roles assigned to access site notes, would that make a difference? It didn't seem to help by setting it for the 'admin' role.
The 'Moderator' role in question does have 'access content' and 'administer nodes' permission, could that be the reason?

The site also uses CCK.

I've reinstalled a fresh copy of the module on the site and cleared all the cache_* tables but it still returns. It's not a major problem, it would save me explaining what they are to the moderators.

Thanks,
Drew

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

Hmm, I think I need to locate a core patch for you. I submitted it a long time ago, and I think you're falling into it.

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented

This is part of the problem: http://drupal.org/node/131950

But the real issue for you is "administer nodes." From the node.module (function node_access):

In determining access rights for a node, node_access() first checks whether the user has the "administer nodes" permission. Such users have unrestricted access to all nodes...

nancydru’s picture

nancydru
she/her/hers
Primary language English
Location Boston
commented
Status: Active » Closed (works as designed)

I guess, since I can't control core, I can't do much abut this.

drew reece’s picture

drew reece commented

Thanks Nancy,

Thats useful to know, I'm trying to avoid patching core (I guess we all are).

Drew