Prevent users from inadvertently un-tagging terms they don't have CREATE privs for?

xjm - August 29, 2008 - 15:53
Project:Taxonomy Access Control
Version:5.x-2.x-dev
Component:Code
Category:feature request
Priority:normal
Assigned:cpugeniusmv
Status:active
Description

Drupal 5.9, MySQL

Suppose I have two roles, HR admin and IT admin. I also have a "node category" vocabulary that looks something like the following:

HR Documents
- Payroll
- Workers' Comp
IT
- Support policies
- Training

Via TAC, the HR admin hrole as create and update privs on HR Documents and its child terms, and the IT admin has create and update privs on IT and its child terms.

Say I have a node that is tagged as both HR and IT because it is applicable to both. If an IT admin goes to update the node, that person sees only the IT terms listed in the taxonomy box--as it should be--but after the node is saved, the node is no longer tagged for HR, even if the IT admin didn't touch the taxonomy box at all.

Instead, I need to have it so that when the IT admin updates the node, it does not affect the HR tags--neither adding nor removing them--and when the HR admin updates the node, it doesn't affect the IT tags.

Any suggestions on how to accomplish this?

#1

xjm - August 29, 2008 - 17:55

I found these issues from a very long time ago:
http://drupal.org/node/83509
http://drupal.org/node/92355

They seem to describe the same problem, but a fix was committed eons ago (to the 4.7 release of TAC).

According to the posts there, the 5.x-2x build has a completely different codebase, but these issues persist in the 5.x-2.x version.

#2

cpugeniusmv - September 15, 2008 - 20:38
Assigned to:Anonymous» cpugeniusmv

There seem to be remnants from the patch in #83509: How to set this kind of taxonomy access control? ('Create' bug at node update) in the 5.x-2.x codebase.

I'll work on this.

#3

diok - October 14, 2008 - 15:03

I am glad to read that this issue is known, because I have been searching and trying a lot to try and solve this. What is the current status of solving this issue?

#4

xjm - January 26, 2009 - 18:54

Any update on this?

 
 

Drupal is a registered trademark of Dries Buytaert.