Project:Forum Access
Version:6.x-1.0
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed (fixed)

Issue Summary

The Active Forum Topics block overrides the access privileges. If I set access to 'A' users, then only 'A' users can access the forum. However, if I have the Forum Topics block enabled, then all users can see the recent forums, click on it and gain access.

Granted, I'm using an older version of this module. I always have trouble upgrading modules. I end up with a domino effect of problems. If you are aware of this issue and it has been resolved, then please say so and I will update. Otherwise, please be aware of this issue.

Thank you.

Comments

#1

Still in RC1 and dev version - confirmed.

It's also with Image Gallery.

It seems nodes aren't respecting the access control of their "container".

EDIT: my old old old 5.x version does NOT have this issue.

#2

Status:active» needs review

Solution(?): When you edit a thread and forum access says it's going to rebuild permissions for the node it contains, it seems it doesn't ACTUALLY rebuild the permissions right.

Go to admin/content/node-settings and rebuild your permissions manually, and it'll take. This solved it for me at least (and my same issue with Image Gallery Access).

#3

Title:Active Forum Topics block overrides permissions» Permissions not set properly in very old beta version
Status:needs review» active

The Active Forum Topics block works just fine for me (provided the permissions are set properly, of course).

BETA1 is very old and I have no idea anymore what it does. You should NOT use beta versions if you're not willing to update, because beta versions are not stable by definition, and sitting on an old version is a very very bad idea.

#4

Title:Permissions not set properly in very old beta version» Permissions not set properly
Version:6.x-1.0-beta1» 6.x-1.0-rc1
Component:Miscellaneous» Code
Status:active» postponed (maintainer needs more info)

@mcaden: Sorry I missed your mention of RC1.

If this problem pops up again, then please follow the procedure with Devel Node Access, as explained when you post a new issue here before rebuilding permissions, and after.

Without hard facts I have no chance to find out anything...

#5

Version:6.x-1.0-rc1» 6.x-1.0
Status:postponed (maintainer needs more info)» active

I think I have just run into this exact same issue, but re-building did not seem to help at all. I am using 6.x-1.0.

The problem is that all my forums where already existing and when I added forum access none of the permission where setup and the forum_access table was empty. So I went to each forum and just resaved it with the default role permission, but this did not change anything.

The solution was to uncheck the default anonymous and authenticated user permissions and save that and then re-edit and recheck the anonymous and authenticated user roles. Once I did this the permissions were set and working.

The next problem is that the Forum Moderator role is checked by default but fields are disabled and when I looked at forum_access table the Forum Moderator role had no records setting the permission.

I don’t want to use per user feature and just want to use the Forum Moderator role to set Moderation all round. To got around this by manually adding a record for a Private moderators forum, but I don’t know yet about the other normal forums.

#6

Status:active» fixed

Thank you for your analysis, NaX!

The {forum_access} table remaining empty is indeed a bug. I've just committed a fix to the -dev version.

The Forum Moderator role is not supposed to have any grants. I'm setting the checkboxes to ON to indicate that the Forum Moderator role has full access to everything, but it has this access due to permissions, not due to grants.

Do NOT assign the Forum Moderator role to any user!!!
It has the all-powerful administer nodes permission and does not work the way you think it does.

#7

Status:fixed» closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

#8

This fix causes new problems, because it adds non-forum TIDs to the {forum_access} table. See #666908-10: Taxonomy terms removed from unrelated nodes and node types.

nobody click here