The permissions given in this module override those which are applied through the organic groups access control module (part of drupal.org/project/og, version 7.2) and essentially give complete access to group content which should be private.

I'll file this against the og module too.

Comments

somebodysysop’s picture

somebodysysop commented

Is this really a bug? Isn't content access *supposed* to override og access if that's what you want?

I think it the issue is whether you want CA permissions ANDed or ORed in your node access logic. Personally, I use "OR" because I want CA to override og access. But, if you use AND, then you've got this problelm: How do you give access to a role which has a user in it who does NOT belong to the group the content belongs to?

I run both modules and they live comfortably together with the Multiple Node Access patch: http://drupal.org/node/196922

Maybe I'm wrong, and someone please let me know, but I don't think this is a problem with the content access module so much as it's a problem with the general Drupal node access system.

fago’s picture

fago
Primary language German
Location Vienna
commented
Status: Active » Closed (works as designed)

it's the way it works.