When I set "update" protection for a role, then it does not limit the term list of a node creation. User can submit freely to vacabulary terms where he has no right to update. Or is there a way to restrict submitting to certain terms that I do not understand?

Comments

Dave Cohen’s picture

Status: Active » Closed (won't fix)

The term list a user sees is controlled by those terms she can view (not update). This is true whether a node is being created, viewed or updated by that user.

If you want to change the list of terms a user can choose from, you can do so by writing your own hook_form_alter().

Tac_lite does not provide this, in part because it could cause problems where a node is tagged with some terms, then a user comes along to edit that node without permission to update all those terms. Then when they submit the changes some of the original terms are lost. (This is actually possible today with view permissions, but less likely). Another reason I don't support this is that it requires a hook_form_alter() and knowledge of the taxonomy form elements which I don't really want to support.