Invalid Content Type - text included from form

scedwar - April 17, 2008 - 15:29
Project:Content Type Administration by Organic Group
Version:5.x-1.5
Component:Code
Category:bug report
Priority:normal
Assigned:paulbooker
Status:postponed
Description

When a user does not have access to create the content type in the group, the Invalid Content Type error is presented. However, on my setup the text from "Explanation or submission guidelines:" is also included. The page is a custom cck type. This is the full message:

Invalid Content Type

This is the submission guidelines text from my test cck content type.

Either the content type you are trying to create does not exist, or you are not authorized to access the content type you have tried to create in the current context. 'Create' a content type by selecting from either the group menu or the 'Create content' menu instead.

#1

rconstantine - April 22, 2008 - 02:21

How are they even getting to this error? If you've set things up correctly, then they won't have any links for these and would have to manually enter a URL. Such a case is not accounted for.

Oh, wait a minute. Are you saying that the user isn't allowed to create this type anywhere, but that other group users are because they have different permissions?

#2

scedwar - April 22, 2008 - 09:03

It appeared during my testing whilst building a new interface into the group. Admittedly it is unlikely for a user to encounter this, however it surprised me that the output was shown like that.

I'm still testing, but there is a scenario whereby a user is an admin of one group into which they can publish a content type, but only a member of another where they do not. The use case is as I originally described in this thread, with your suggestion to use this module: http://drupal.org/node/192933#comment-709004

#3

rconstantine - April 24, 2008 - 00:58

So is this content type being selected at the site-wide level and then being placed into a group to which the user doesn't have permission? Is that it? I'm a bit hazy on the steps required to produce this error.

#4

scedwar - April 24, 2008 - 15:01

Imagine 3 users: admin
Group1 - user1 (as admin), user2
Group2 - user3 (as admin), user1 (as member)

If user1 tries to post in group 2, they get the "invalid content type" message preventing them from doing so. This is good. However, they also get the description text included.

#5

rconstantine - April 26, 2008 - 04:50

But where is the user when they try to create the content? Which URL begins this process? Please list examples in order of how you see them. Thanks.

#6

scedwar - April 28, 2008 - 09:00

The URL is the same as the links in the group block as overridden by this module.

I know the URLs are not displayed to those without permissions, but we're testing a variation on this and wanted to see what would happen if a user tried that URL. This URL isn't hard to guess and I was surprised to get the response I did.

#7

paulbooker - July 23, 2008 - 14:11

Do you still need assistance here ?

#8

scedwar - July 25, 2008 - 09:22

It is still broken, but we've worked around it with our own custom menus and will be removing this module entirely from our site having implemented alternative ways to achieve what we want without this module.

So for our purposes we aren't fussed, but as far as this module is concerned, it is broken. I'm sorry to say, but this module has a few other issues that make this more like a dev release than a stable release.

#9

paulbooker - September 2, 2008 - 16:04
Assigned to:Anonymous» paulbooker
Status:active» postponed

Postponing this CCK related problem until after the migration to D6

 
 

Drupal is a registered trademark of Dries Buytaert.