By aac on

I am using Drupal 6.9 and workflow 6.x-1.1.
I have two roles "admin" and "story writer" on my site. "admin" can do anything and "story writer" can only "write" stories and "edit" his own stories.
In my workflow, there are four states "creation(default), Pending for approval, Approved and Published".
Now suppose if an authorised user submits an story and it is approved by the site "admin" for publication. Now the problem is that the story (which is now in Approved state) is still editable by it author, which defies the purpose of "access control" provided by workflow module. I have configured workflow access such that the "story writer" can NOT edit his story in "Approved" and "Published" states (in fact no role is allowed to edit the story once it goes in Approved/Published state).

I am also using Content Access module 6.x-1.0 and for story content type, i have configured "Access Control" such that "story writer" can edit his own story and advanced setting "Give content node grants priority:0" is kept at default value.

Thanks for any help!!

⋅ Categories: Drupal 6.x

Comments

els’s picture

els commented

You can remove the permission "edit -your content type-" for the specified role. This way they wont be able to edit at all.

aac’s picture

aac commented

You are absolutely right, if i remove the "edit own story" permission from "story writer" then they will not be able to edit their own story at all once they submit a story. But suppose if i want them to allow some modifications before the story is approved/published then it WILL BECOME A PROBLEM?? So there must be an access control which looks for content state and then allow/disallow the required premissions.

---~~~***~~~---
aac

bigkevmcd’s picture

bigkevmcd commented

Use the Workflow module

Create a Draft and a Published state, in the Draft state, allow authors to edit and view, and in the Published state, don't allow authors to edit.

Should be fairly simple.

aac’s picture

aac commented

Thanks for your reply!!
I am using the same and facing this issue!
Is there anyone who is also facing the same issue??
Thanks for any help!!

---~~~***~~~---
aac

bohz’s picture

bohz commented

Hallo.
I'm having the same problem.
Using workflow to manage the publication of articles:

"article" node types have two states, beside (creation): draft and approved

only role "supervisor" can change the state of an article from draft to approved

role "author" is allowed to edit own "article" node type posts (user management->permissions)

but role "author" is not enabled to change back the state from approved to draft (workflow settings)

still, "author" users are able to edit their own posts after they have been approved by the role "supervisor"

It seems that the workflow permissions are not overriding the role permission for the specific node/user.
For the time being, I am setting up workflow actions to revoke publication (approved) state when a user edits his/her own article after approval, reverting it to draft state. But this is not very practical since you'll end up with articles disappearing from the live site everytime the original author modifies them.

I subscribe for any helpful suggestion on how to prevent any role other than the content supervisor to edit content once it's set to approved state.

Thanks a lot!

aac’s picture

aac commented

I have read somewhere on this forum that you should set in your "content type workflow default options to published selected". In this way any article created will be in published state from the very begining. Now workflow states access control will work on this article as in Drupal you can not control the access for unpublished articles (Drupal core feature). I have not tried it as i have already wasted a lot of my time in searching a solution for this issue.
There is another module Revisioning (http://drupal.org/node/218755) which i came to know about yesterday. I tried it, but i found other issues in it-
1. http://drupal.org/node/416428
2. http://drupal.org/node/416580

So i am still waiting for a solution????

Thanks

---~~~***~~~---
aac

steve02476’s picture

steve02476 commented

Maybe the Revision Moderation module ( http://drupal.org/project/revision_moderation ) will help. I don't use the Workflow module, but I do use Revision Moderation and it allows people to edit nodes without the edits going live. I guess Revisioning is supposed to do that also, but it's very new. Revision Moderation has been around for years. It doesn't have a lot of automated workflow kind of stuff, and I don't know how well it gets along with the Workflow module, but I think it does the job.

bohz’s picture

bohz commented

Yes, I have read that post. As far as I have understood you should setup the content type as "published" if you use node access module in conjunction with workflow module;
but if you only utilize workflow, you should keep the content type you want to moderate as not published by default. The workflow module will publish the nodes when they are moved to approved state.
In fact, I have tried to enable publishing by default and the result is that the node stays always published, regardless the workflow state.
Also, I think I've learned that the workflow access permissions, only address the permission to change from one state to the other, not the possibility to enable/disable an author to edit one of his/her own nodes.

I suppose I (and you, aac?) have missed some steps in the configuration of the module, but where?
BTW, I did set up the module (2 times) following the step-by-step instructions on the book Using Drupal.

I really would like to read the opinion of an experienced user of the workflow module on this topic. It seems unusable this way, and I doubt that among more than 1000 users, no one would be aware of this.
Cheers.

Edit: I have just finished reading the docs for the Revisioning module. It actually seems to do what I am looking for, although I did not expect everything to be so complicated. I'll give it a try too and will post here any progress.