Hello,

I'm working on a drupal site that uses the Forum Access module along with the Forum module.

The module works great for restricting users from viewing forums or posting/editing/deleting topics. However, it doesn't seem to apply permissions to the topic replies. Is this by design, or is my set-up just wrong?

Here is my setup:

I create one forum, Test Forum A.

I create two roles with blank permissions, Test Forum A Access, and Test Forum A Moderate.

I add View and Post permissions for the Test Forum A Access role in the Test Forum A forum.

I add Edit and Delete permissions for the Test Forum A Moderate role in the Test Forum A forum.

Users who have the Test Forum A Access role have the following permissions in Test Forum A:

View the forum.
View topics in the forum.
Post topics in the forum.
Post replies in the forum.
Edit own topics in the forum.
Edit own replies in the forum.
Delete own topics in the forum.

Can NOT delete own replies in the forum.
Can NOT edit other people's topics in the forum.
Can NOT delete other people's topics in the forum.
Can NOT delete other people's replies in the forum.

Users with the Test Forum A Moderate role have the following permissions in Test Forum A:

View the forum.
View topics in the forum.
Post topics in the forum.
Post replies in the forum.
Edit own topics in the forum.
Edit own replies in the forum.
Delete own topics in the forum.
Edit other people's topics in the forum.
Delete other people's topics in the forum.

Can NOT delete own replies in the forum.
Can NOT delete other people's replies in the forum.

So, my question is:

Does the Forum Access module control permissions for comments. I would like to have it so that roles with Edit and Delete permissions in a forum can also edit and delete replies in that same forum. I would also like roles with View and Post permissions can edit and delete their own replies.

Is this possible? Anything else I should know?

Thanks a lot,

Joe

Comments

salvis’s picture

salvis
he/his
commented

Thank you for your carefully researched and written up query.

At this point, Forum Access is unable to control comments directly, only through node access control. This is a limitation of the current implementation, which goes back to a limitation of Drupal, which doesn't have access control for comments beyond the global permissions.

The comment access of users that have the View grant, is defined by the global permissions.

Giving Edit & Delete, but not View and Post is odd. You could see strange behavior with that combination.

I intend to work on this, but it will not be easy, and it will not happen soon. You have apparently given the 'edit own forum topics' permission, and I think this will naturally extend to their own comments.

sublick’s picture

sublick commented
Status: Active » Closed (fixed)

Thanks for clearing that up, Hans.

You are right about users being able to edit their own comments--that works fine.

Cheers,

Joe