Users able to edit wiki nodes regardless of membership
Todd Nienkerk - March 10, 2009 - 03:29
| Project: | Organic groups |
| Version: | 6.x-1.1 |
| Component: | og_access.module |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | postponed (maintainer needs more info) |
Jump to:
Description
Enabling wiki-style editing on a content type does not take group membership into account when allowing a user to edit a node of that type. The "edit any [content type]" permission appears to solely control whether a user can edit that content type.
I am curious to know how g.d.o handles this use case. Currently, a user sees a message telling her to join the group before she can edit a wiki page; members can simply click "edit." I'm trying to duplicate this exactly, but I can't find a way in OG to produce this per-group behavior.
Notes:
- The environment is a very simple sandbox installation, and no other access control modules are installed.
- This issue seems very similar to #157140: Users from the same group edit group content. Perhaps something was undone in a recent commit?
#1
You have to uncheck 'edit any foo' in order for wiki to work.
#2
I should say, "in order for wiki to only apply to group members"
#3
moshe: Unfortunately, I've tried exactly that. Unchecking "edit any foo" doesn't result in the expected behavior. Members of a group cannot edit wiki pages created by other people.
Strangely, unchecking "edit own foo" does allow a member to edit their own wiki page when it's in a group of which they're a member. So this use case behaves as expected.
Rebuilding permissions does not alter this pattern.
#4
Subscribing.
#5
I can't reproduce this.
Re-save the node and make sure that the node doesn't just fix itself.
If you want to debug, query the node_access table where nid=[nid in question] and post your results here. If it is a wiki post, it should have a row where in the og_subscriber realm where view=1 and update=1. if it doesn't then that explains why group members can't edit. we'd need to understand why that grant is not being recorded.