Hello,
I have a press release editor that has a roll of 'press release editor' naturally. I want this person to be able to list, add, and edit press release content type nodes. I DON'T want the press release editor to list, add, or edit any other content type like speakers, agenda events, etc.

Here's the challenge: If I check 'administer nodes' for 'press release editor' role, that person can see, add, and edit anything. That makes sense as 'administer nodes' overrides everything else when checked. However if I uncheck this with other 'press release' items checked as needed, other issues occur. The press release editor can add new press releases, but not list press releases already added, or even access the page to list/filter press release content from the admin page.

Am I missing some checks somewhere? Any thoughts on how to fix this?

Thanks much. :)

Comments

Junro’s picture

owntheweb’s picture

Here's what worked for me: Content Management Filter module
http://drupal.org/project/cmf

Everyone has correct access now, and also improved content listing of already added content. People are happy. :)

Worlds to explore. Worlds to create.
Blog: http://www.christopherstevens.cc/blog
Twitter: http://www.twitter.com/owntheweb

Junro’s picture

Hum cool, I was not sure about this module, I will install it now! Thanks

Junro’s picture

I have installed the module, but I've still got the problem. Have you do something particulary?

Junro’s picture

I report the problem in Drupal Core -> node system.

It's a very critical bug that should be fixe as soon as possible, subscribe to the issue below:

#546976: Users without "administer nodes" permission are not able to "access" all nodes:

owntheweb’s picture

Make sure your permissions are checked. I have 'administer nodes' unchecked for all, with individual node types checked for each specific user role. I also checked 'filter and manage site content' and 'view user content list' under 'cmf module' for everyone except for 'anonymous user' and default (in my case anyway) 'authenticated user'.

Worlds to explore. Worlds to create.
Blog: http://www.christopherstevens.cc/blog
Twitter: http://www.twitter.com/owntheweb