Download & Extend

Node edit link appears ok, then get access denied

Project:OG User Roles
Version:6.x-4.x-dev
Component:Miscellaneous
Category:support request
Priority:normal
Assigned:Unassigned
Status:closed (won't fix)

Issue Summary

Environment:
D 6.10
OG 6.x-2.x-dev
role: OG Local auto (set as default role for new group members)

Logged in as group member I have role "OG Local auto" which gives edit permissions to all node type x. When I navigate to a node of type X I get edit link but then Access denied error when I go to edit content.

I have output data to og_user_test table

testDate, testUser, testUserName, testGroup, testFunction, testSubFunction, testString, testStatus, testURI, testAArg0, testAArg1, testAArg2, testAArg3, testPerm
28/05/09 17:49 12 simon 195 og_user_roles_all_roles 2 group context:   /node/205/edit node 205 edit   Roles Returned: (authenticated user,OG Local auto)
28/05/09 17:49 12 simon 195 og_user_roles_all_roles 2 group context:   /node/205/edit node 205 edit   Roles Returned: (authenticated user,OG Local auto)
28/05/09 17:49 12 simon 195 og_user_roles_all_roles 2 group context:   /node/205/edit node 205 edit   Roles Returned: (authenticated user,OG Local auto)

Three lines of data get output per attempt.

Also this user can't create content even though role OG Local auto has permission to do so.
If I give this user this role site wide editing works as you'd expect.

Anyone have any ideas on this

Cheers
Simon

Comments

#1

The role appears to be assigned correctly. Might be a caching issue which is addressed here: http://drupal.org/node/471882

Try downloading latest dev release (in about 12 hours).

#2

I'm having the same (or similar) problem - using og user roles 6.x.4.x-dev, dated 2009-Jul-01.

When the edit tab is selected, the node edit page appears to lose its group context. I have some blocks that appear on the group page which disappear when the edit page (with "access denied") loads.

Strangely, I have observed that if the page has been authored by user 1 (admin), then other group members who are getting their edit permissions through ogur can edit the node, and the group context is maintained (the group blocks appear). However, when the page is authored by someone other than user 1, then the group context is lost when node/#/edit is invoked, ogur does not grant them permissions, and so access is denied.

It appears, in my case at least, that the problem is related to the loss of group context. I'm guessing that the proximal cause of the denial of access is due to ogur not granting permissions because it doesn't think you're doing so as a group member. Why it works if the author of the node was user 1, is another mystery!

#3

After hacking around adding print_r statements in og_user_roles.module, it appears that group context is not lost.

#4

Version:6.x-1.x-dev» 6.x-4.x-dev

#5

Status:active» postponed (maintainer needs more info)

Sorry, but exactly what has been stated here is covered by an automated unit test, which still passes fully.

I can only guess that you have some other, conflicting module installed.

#6

On a clean install (D6.13) I do not get this error. On the instance where I have been having this problem, when I disable all modules except core, og, views, and ogur and one or two others, the access denied problem remains. So I wonder if there is some kind of corruption in data - not code - that could cause this? (I have tried obvious things like rebuilding permissions.)

I have encountered another access denied behavior on a fresh, bare-bones instance however: for viewing/managing revisions. If there isn't a issue already for that, I'll create one.

#7

Status:postponed (maintainer needs more info)» closed (won't fix)

Sorry, without further information this issue can only be marked as won't fix.

Feel free to re-open this issue if you want to provide further information. Thanks.

nobody click here