Users can view content on front page without permission [#316678]

1. I have these 2 roles defined: users and clients.
2. I'd like to give users acces to content type “bla”.
3. Then with nodeaccess a user can grant a single client the right to access a specific node of the “bla” type.

However, after step 2, when a user has created a node of content type “bla”, the node is promoted to front page. And any client logging in is able to see the node on the front page and press “View” and “Edit” on it.
I’ve also checked the permissions under user management, and clients are not given the permission to do this.

What am I doing wrong? And why does it seem that there are 2 places to set these permissions? At the permissions page and under “Access Content” at the content type?

Comments

Comment #1

erikkramer commented 4 October 2008 at 17:45

Title:

Users can ciew content on front page without permission

» Users can view content on front page without permission

Comment #2

erikkramer commented 4 October 2008 at 19:06

I've disabled nodeaccess.
Created a content type where at the Access Control tab, nodobody is given access.
Still, when I create a node of this content type, it's visible to everyone on the front page, and it can be clicked and viewed.