I've got protected node working for a content type (i e when i try to view a protected node it asks the anonymous user for the password). However, the user can access node/xx/edit directly without giving any password, which is not good at all.
To not get an "access denied" when going to a protected node path, i need to grant "administer nodes" for anonymous users, but this also gives them access to node/xx/edit. This is what I've found out so far. I've fiddled around for ages without finding a solution. Anyone know what I might be doing wrong?
Comments
Comment #1
mtolmacs commentedBut protected_node module does not interfere with the node module's permissions so unless you enable those groups you mention to edit nodes I pretty much can't see how they can end up editing those nodes.
Comment #2
mtolmacs commentedI assume that this was a false positive. Please reopen if you can reproduce this issue and/or have more information.
Comment #3
sittard commentedI also needed to protect 'node/edits' from people with the same role. My solution was to create a custom module with the following code.
I'm using D6 and Protected Node 6.x-1.5.
Perhaps this functionality could be added to the module?
Thanks.
Comment #4
mtolmacs commentedWe'll see how this can be solved.
Comment #5
AlexisWilke commentedThis is fixed. The behavior of the module is the same, but the way it is done is now correct and anything under the node/#/* path is protected.
Thank you.
Alexis