By penjat on

Hello.

I am using Organic Groups in my site. I have defined two content types: "TEAM" to be as the group node, and "DOCUMENT" to be as the group wiki post (this content type is a "book"). The site administrator creates "Teams" (node groups) and manually assigns users to those teams (I need closed gropus). I want that the members of a Team to post "Documents" in their own teams. But I find that a member of one team can edit and post documents in another team, and I need that the members of a team only post documents in their own teams.

Is it possible to do this? What modules and what configuration do I need?

Is it possible that members of a team can't see content of other teams?

Thanks and sorry about my English ;-D.

⋅ Categories: Drupal 5.x

Comments

steveadamo’s picture

steveadamo commented

Odd, thats actually exactly how the OG concept works. Members in one group are not exposed to content in another group (unless they are members of that group as well).

Hmm... can you provide more information on your other OG settings perhaps?

penjat’s picture

penjat commented

Well, the problem is that my site is working in the opposite concept: members of one grup can edit and post in another groups, and I don't want it to work like that...

I'll try to expose you the configuration:

Admin -> Organic Groups -> Configuration -> Content types

    "Document" as wiki post. The content type is a book.
    "Team" as group node. The content type is a group.
    The rest of the content types are not allowed to be posted in a group

Admin -> Organic Groups -> Configuration -> Details

    Audiences verification checkbox unchecked
    Optional audience

Admin -> Organic Groups -> Access configuration

    Only visible for the indicated groups
    The administrator sets main page and audience to public or private. Default public.

I have defined a Role named "Team member" in order to set the permissions to post in a group. Then the admin creates a group and enrolls the members, he assigns that role to all the members. The permissions of the "Team member" role are:

Book module

    Create document pages
    Create new documents
    Edit own document pages

And authenticated users have permission to content access (node module).

What's wrong? Why members of a group can edit and post in another group?

Thanks

steveadamo’s picture

steveadamo commented

I have defined a Role named "Team member" in order to set the permissions to post in a group. Then the admin creates a group and enrolls the members, he assigns that role to all the members.

I think that might be your problem... if I understand correctly, you have setup a site wide role called Team Member, and assigned individuals from different groups to the role.

If the role can generically create/edit book documents, there is no way to distinguish (in your current setup) which books they should have access to (a book in Group 1 is considered the same type of object as a book in Group 2)... so if Steve is a Team Member in Group 1, and I have rights to create/edit book materials, that means I can apply those priviledges to books in Group 2, Group 3, Group X, etc.

someone correct me if im wrong here... :)

I think you can remove the role requirement... just by virtue of being a member of the group (and having set the correct permissions to the group's node types), your members will only be able to access/edit the content in their own group... thats how its working for me...

penjat’s picture

penjat commented

I don't understand it. If I remove the "Team member" role, and no site wide role has permissions to create and edit node content, how can a group member create and edit content?

I've been two days making changes and testing modules and configurations, but I can't get what I want. Maybe I have to start from the beginning...

I want a portal with some contents (stories, pages, etc...). Authenticated users must only be able to read the contents. I want to create groups (the only one who can create groups is the admin user), and the admin user creates the membership for those groups. Member groups must be able to create content only in their groups, but not in another groups. Member groups can post private and public content, so that other users can see the public content but not the private content.

I can't set up my portal to do that, and I think that it must to be easy...

What can I do? Can someone give me an example of an appropiate configuration to get that?

Thanks.

steveadamo’s picture

steveadamo commented

i would suggest starting over... here is my current (basic) setup:

Organic Groups content types
User Group: Group node
Group Post: Standard group post (typically only author may edit)

Group details
New groups always appear in the groups directory.
New groups don't appear on the registration form. Administrators control the form exclusively.
Audience checkboxes (checked)
Audience required (optional)

Roles
Group administrator (no specific permissions set yet - effectively the same as an authenticated user at this point)

User permissions
Anonymous users
>> node module
>>>> access content

Authenticated users
>> node module
>>>> create group post
>>>> edit own group post

I hope that helps! :)