Couldn't see that anymore, so I looked over the hook_menu and hook_access functions for panels_node. Those tabs are constructed with a base array, containing the access callback "node_access" checking for $op=='update'.

Looking into node_access gives the answer to the Known Issue #4. There are at least two cases where node_access returns TRUE without calling panels_node_access once. Case 1: User has 'administer nodes' permissions. Case 2: Node is NOT a Panel and the user has rights to update this node-type.

Fix: add a helper function which checks the node against panel-type first. Call node_access after that (which will then call panels_node_access later). Am I missing something?

check the patch (needs menu rebuild to test)

CommentFileSizeAuthor
panels_node-6--2-0-ALPHA2.patch1.1 KBjapanitrat

Comments

japanitrat’s picture

Title: panels_node related local tasks for panel nodes only » show panel tabs for panel nodes only
merlinofchaos’s picture

Status: Needs review » Closed (won't fix)

Panels 2 is no longer available and is unsupported. Marking all Panels 2 issues won't fix.