Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.If you give a role the permission to 'ask a question', then they can type in www.yoursite.com/node/add/question and they can create a new question on your site without approval. I don't know if this is the same in 5.x. I haven't tested it. I have just tested on the latest 6.x-1.x-dev
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | question_519626_permissions.patch | 796 bytes | tanoshimi |
Comments
Comment #1
tanoshimi commentedIt looks like question_access is checking the wrong permission. Currently, permission to create a question node is granted to users with "ask questions" permission, but the question node is really the question and answer combined, which should therefore only be given to users with the "manage questions" permission.
Permission to create questions (i.e. to add a new row to the question_queue table) is controlled by the "ask questions" combined with the value of the question_require_registered variable in question_qform().
Attached patch should correct this.
Comment #2
tanoshimi commentedchanging status
Comment #3
tanoshimi commentedThis patch passes the tests created in http://drupal.org/node/758638, so I'm going to mark it as Ready To Be Committed.
As soon as my cvs access is sorted out, I'll commit both the patch and the test!
Comment #4
tanoshimi commentedCommitted to 6.x-1.x-dev branch.