SbT doesn't respect node access?

szy - December 8, 2008 - 16:02
Project:Similar By Terms
Version:6.x-1.10
Component:Code
Category:bug report
Priority:critical
Assigned:Unassigned
Status:postponed
Description

Hi,

SbT block doesn't respect Domain Access rules and displays nodes from all domains
in multidomain environment, what could be a bit confusing.

There is wrapper of db_rewrite_sql in similarterms.module, but... looks like it doesn't
enforce node access rules?

Szy.

#1

rmiddle - December 8, 2008 - 16:20
Status:active» postponed (maintainer needs more info)

What project?

Not sure if the issue is SBT or that project. I need more info to figure out what needs fixed.

Thanks
Robert

#2

szy - December 8, 2008 - 16:42

I have a few domains specified in Domain Access module. Every node has specified
its *one* domain. And all the nodes are tagged with shared freetagging vocabulary
called 'Tag'.

Then, displaying 'Similar entries from the Tag vocabulary' block I get nodes from all
the domains, instead of only the active domain.

I think it happens because of SbT module, what does not check node access,
specified by Domain Access.

Am I right? :]

Szy.

#3

rmiddle - December 8, 2008 - 16:48

There is no module named Domain Access modules. Can you please include http://drupal.org/project/???? Link so I can see the module in question.

Thanks
Robert

#4

szy - December 8, 2008 - 17:00

Domain Access:

-> http://drupal.org/project/domain

Szy.

#5

rmiddle - December 8, 2008 - 21:25

STB doesn't do anything other then use standard drupal access rules. I will look and see if it is a simple change but most likely this is something that project domain has to do.

Thanks
Robert

#6

rmiddle - February 26, 2009 - 00:28
Status:postponed (maintainer needs more info)» postponed

Yea. The query doesn't check any access rules. Marking this as postponed since I will need to fix this at some point.

Thanks
Robert

#7

muckermarc - February 25, 2009 - 16:46

I'm seeing a similar issue to the original poster.

Using Domain Module 6.x-1.2 and Similar by Terms 6.x-1.8 on Drupal 6.9.

I have 3 domains, and the bulk of the content is available across all 3 domains.

There are 4 nodes which are domain specific (ie which show up on 1 domain and not the others), but unfortunately links to these nodes are showing up in the SBT block regardless of whether the user can access them or not. Clicking on these links results in a 403 access denied.

I've only noticed this issue after installing the latest SBT module, I don't believe it was a problem before as my linkchecker only shows 403s from after my last module update.

I'd be grateful for any help with this, perhaps rolling back to the previous version of SBT will fix it?

Cheers,
M

#8

szy - February 26, 2009 - 00:54

@muckermarc, status of this issue is 'postponed'.

Use Relevant Content module instead, it works fine with Domain.

Szy.

#9

muckermarc - March 6, 2009 - 15:10

Thanks Szy, I'll check that out.

 
 

Drupal is a registered trademark of Dries Buytaert.