Extend privacy to hide a private node's comments [#366110]

How long before the module is stable in Drupal 6?
Is it also possible for the private checkbox to make the nodes and the nodes comments private also.
At the moment a blog entry can be private, but when the allowed users make comments to that private blog entry, the comment title appears in the 'Recent Comments' block. When the titles are clicked on the user if not alloewd to see the blog entry will be taken to an error screen, but then the privacy element has already been breached as users know there is a private blog entry and they know that it is generating comments - not an ideal situation!
If the blog entry is private so should the comments be.

Comments

Comment #1

dingbats commented 17 February 2009 at 04:40

Component:	Miscellaneous	» Code
Category:	support	» feature
Status:	Active	» Postponed (maintainer needs more info)

Maybe there's something up with the packaging system so that there was never a stable package release. There's some discussion of it on #223909: Show snapshot and/or create 6.x-1.0 release. Look at comment #7.

As for privacy that extends to hide a node's comments, perhaps you could put forward a patch?

Comment #2

dingbats commented 17 February 2009 at 04:41

Title:

Module progress

» Extend privacy to hide a private node's comments

Comment #3

k3rn3l commented 2 March 2009 at 15:29

I've tried the module with the page nodes and it works correctly: My steps:

1.Add recent comments block
2.Create page node type with private checkbox checked;
3.Create a page node type with private checkbox unched;
3.Add comment to the private page node
4.Add coment to "public" page node
3.1 It shows both comments in the last comments block (as it should)
4. Logout
4.1 The comment for private page doesn't show in the block
4.2 The comment for public page shows in the block
5.Login as a different user
5.1 The comment for private page doesn't show in the block
5.2 The comment for public page shows in the block

Next i've added the view_own module (another content-access module) and the result where:

1) Just by rebuild the permissions all users (how are not authors) loose access to page nodes (and no comments on the last comments block)

2) added view any page permission to anonymous and authenticated users and private nodes are no longer private!! and comments for the private page also show in the last comments block!!

My Conclusion:

private module works well, the problem is when you have more than one content access module and one of them overrides the permissions set by the private module!!!