Tribune bypasses node access modules
GentleArsonist - May 21, 2009 - 08:10
| Project: | Tribune |
| Version: | 6.x-2.x-dev |
| Component: | User interface |
| Category: | bug report |
| Priority: | normal |
| Assigned: | SeeSchloss |
| Status: | closed |
Jump to:
Description
I use the module 'simpleaccess' to limit the access per node basis to certain user roles, and it works like a charm with all my nodes and nodetypes. Unfortunately except with tribune nodes :(
I don't know whether this is a bug or just a feature request ;) but I'd find it very useful to have an easy way to restrict the access to certain tribunes.
#1
I have the same problem. :(
#2
This is because
tribune_accesstrumps all node access modules by returning a check on the 'View' operation.This is not best practice in Drupal coding. See blog.module, for instance --> http://api.drupal.org/api/function/blog_access/6
Node modules should normally not return a value for $op == 'view'.
Find these lines in tribune.module and just comment it out for now. I don't have time for a patch.
case 'view':return user_access('read tribunes');
#3
Better title, this breaks OG, Domain Access, and TAC as well.
#4
Well, that should be fixed. But is it me or is Drupal's permissions system not very flexible ?
Or maybe the documentation is hidden somewhere, but I can't seem to find a way to allow people to choose who can post stuff in their tribunes.
#5
Automatically closed -- issue fixed for 2 weeks with no activity.