i created a calendar and basically two roles:
the site owner and his supporters

the calendar should include public, internal and private dates of the site owner (done by taxomomy for dates)

my task is now to make the private dates only visible to the site owner AND have the possibility for the supporters to manage nodes (thats how they should support).
everything works nicely so far, guests see the public, supporters the public and internal, and the site owner all dates.

but when granting "administer nodes" to the supporters, the calendar view then shows the private dates as well, only the colour label above is missing.

is there any known way around this? to let roles administer nodes, but still provide some privacy on certain tagged nodes for the site owner role?

any hint would be appreciated

Comments

Dave Cohen’s picture

Dave Cohen commented
Status: Active » Closed (works as designed)

This is not because of anything tac_lite is doing, it's built into Drupal core. Look in node.module function node_access() for code like

  if (user_access('administer nodes', $account)) {
    return TRUE;
  }

You could remove that clause to get the behavior you want. Although to do so would be hacking core.

If it were me, I would grant administer nodes permission only to true site administrators. Your supporters role sounds like it should have less privilege than that.