I am using the latest stable TAC Lite on Drupal 6.9 with the latest ACL / Content Access, Adsense, Captcha, Event / Signup, Image, Nice Menus, Profile Privacy, Ubercart, Views, Weather.

I am using it to restrict access to News and Event terms for anonymous users. It works perfectly for News terms, and does prevent access to the Event terms and their drop down filters, but Events using those terms appear in the Event Calendar, and when clicked on can be viewed. Is there any way to prevent this / is this not something that TAC Lite supports / is it a bug?

Comments

Dave Cohen’s picture

Dave Cohen commented

When you configure tac lite you tell it which vocabularies to pay attention to. Sounds like you have it configured to use news terms but not event terms.

Or, you have a permission set that allows users to view events. If some other part of drupal, like the user permissions, allows access to any given node, it will not matter how tac_lite is configured.

tominglis’s picture

tominglis commented

I have configured it to pay attention to news and event terms.

I have explicitly not allowed anonymous users to view the two event terms that I don't want them to, and this works to the extent that you can't put browse the taxonomy term links, and you can't see the items in the filter boxes on taxonomy term, views, or the calendar page. However, the individual event items, associated with either of those two terms both appear on the calendar, and you can click on them to view them in their entirety. The only thing missing is the link to the event term from the bottom right.

Dave Cohen’s picture

Dave Cohen commented
Status: Active » Closed (won't fix)

tac_lite is doing its job, hiding the terms. Something else is allowing the user to view the nodes. That allow permission has priority over anything tac_lite can do.

tominglis’s picture

tominglis commented

Actually, it just strips the taxonomy term from the news or event items, and stops you from directly linking or filtering by taxonomy terms.

Is there a way for me to block the news and event content related to the taxonomy term from being accessed by anonymous users? I don't think this is something that can be done by Content Access, since this is not a content type in its own right, just a taxonomy term.

Dave Cohen’s picture

Dave Cohen commented

In drupal, there's more than one factor controlling whether a node is viewable. If for example there is a permission, "view event content" or some-such, and you give that permission to your users, then they'll be able to view those nodes regardless of what tac_lite is doing.

I said, "tac_lite is doing its job" because the terms are hidden. It's something else that is making those nodes visible. If you can locate that something else and change it, then tac_lite will become the deciding factor of whether the node is viewable.

Have you heard of the devel module? It has a companion module called devel_node_access which can render a block which shows what drupal's node_access table has to say about any node. It might help to install that and troubleshoot your problem.

tominglis’s picture

tominglis commented

I unchecked 'View' for anonymous users in "Role based access control settings" for Event and Story, and it worked. I can still see all of the event and news items as an anonymous user, except for the Tac Lited ones. Fab! Not sure why that works though, I would have thought they can't see anything if you uncheck that!?

/?q=admin/content/node-type/event/access

Thanks loads for your help Dave!