Just ran into an interesting situation. I had created some content on my site, then installed Workflow later to see if it fit my needs. (It does BTW, great module!)

I have a "Author (Moderated)" role, who doesn't have "Administer nodes" permission but can create/edit/delete their own content of our various content types. This role can only move content from (creation) to "Draft" and "Revise" (states I created in Workflow). Moving something to Revise triggers an Action that sends an email to moderator to view the article and approve (Workflow to "Published" which triggers an Action to publish the article) or reject (Move back to "Draft", which triggers an Action to send an email to the original author to revise their article).

I was just testing to make sure my "Author (Moderated)" could only edit their own content (I was trying to learn the just what "Administer Nodes" actually grants) and I found that my user could see the Workflow tab on content that didn't belong to him. He could get in there and change the Workflow state as well! (Only to Draft or Revise, which was correct for his role, but still...he could effectively unpublish any content on the site)

After testing a bit more, I realized that this was because that particular piece of content had not had an entry created in the Workflow table yet. It was content that was created before I installed Workflow, so I guess the Workflow module didn't know what it was supposed to do. After publishing the content with my moderator user, my moderated author could no longer see the Workflow tab and make changes to it.

I'm not sure what the solution is as I don't know the internal workings of Workflow and I'm just getting into the deeper workings of Drupal and its modules now, but thought I should flag the issue for those who install Workflow part way through their site's lifecycle, and for the module contributors, if they want to document this/address it.

Using...

Drupal 6.6
PHP 5.2.6
Win IIS
MySQL 5.0.45
Workflow 1.1

Cheers!

PS - sorry if this has been brought up before, I couldn't find anything similar to this by searching. :/

Comments

Bastlynn’s picture

Bastlynn commented
Status: Active » Closed (won't fix)

Since this request is over 2 years old, I'm going to assume a solution was found or you've moved on. If not, please get updated to the latest versions of all modules and see if things have fixed themselves. If not, open a new ticket and I'll be glad to look at it.