View ACL messes up with OG Public audience
| Project: | node privacy byrole |
| Version: | 4.6.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed |
Jump to:
Hello All,
I am new to the drupal comunity so maybe what I've observed is not a bug but feature by design, however I experience strange behaviour wher node_privacy_byrole and og mosules are working together.
When Organic Groups modele is installed each node can be assigned an Audience, and by deafult the Public is checked. For the node I've clicked who can VIEW the node. Upon save in the node_access table I have the following:
mysql> select * from node_access where nid=52;
+-----+-----+--------------------------+------------+--------------+--------------+
| nid | gid | realm | grant_view | grant_update | grant_delete |
+-----+-----+--------------------------+------------+--------------+--------------+
| 52 | 0 | og_group | 1 | 0 | 0 |
| 52 | 1 | node_privacy_byrole_role | 0 | 0 | 0 |
| 52 | 2 | node_privacy_byrole_role | 1 | 0 | 0 |
| 52 | 3 | node_privacy_byrole_role | 0 | 0 | 0 |
| 52 | 4 | node_privacy_byrole_role | 1 | 0 | 0 |
+-----+-----+--------------------------+------------+--------------+--------------+
Actually, the first record (corresponds to the Public audience) overrides all node_privacy_byrole records and thus the content is visible to all!
Maybe I should address this issue to Organic Group module? For the moment I've commented several lines in og.module and somehow managed to bypass this behaviour, but please tell me if there is a fix, or update...
greetings
Diman

#1
Drupal does not work well with multiple access control modules. In essence if access is allowed via any module then access is allowed (roughly). I have written an experimental solution that works well for me but YMMV.
See http://drupal.org/node/24868
#2
Tidying up old issues. Focus now is on Drupal 5 version of the module. If there is still demand for this to be resolved and it gets resumbitted then I'll look into finding a solution.