It might sound strange, but I'm trying to run the basic 4.6 search module along side of trip search.

I would like to limit the trip search permissions to specific user roles. However, it seems that these permissions are permanently linked to the permissions for the basic search module. Is there anyway around this?

I want to offer certain organic groups the advanced search features of trip search, while also offering anonymous users with a search feature. I would just use trip search, but then anonymous users would be able to see listing of taxonomy terms which I want to keep private to og members.

Any suggestions? I guess that I could use a taxonomy permissions module, but I haven't found one that works reliably with organic groups.

Thanks,
Sean

Comments

joel_guesclin’s picture

joel_guesclin commented
Assigned: Unassigned » joel_guesclin

I may try to look at this in 4.7 when I get a chance. The 4.7 version does control node access so at least you could prevent anonymous users from seeing nodes they are not supposed to see.

joel_guesclin’s picture

joel_guesclin commented
Version: 4.6.x-1.x-dev » 4.7.x-1.x-dev
Status: Active » Closed (won't fix)

Is there still any interest in this? I started looking at the subject, however it raised several questions which need answering before it could be undertaken and it is actually more of a job than I had thought at first.

1) The "list of terms" actually appears in two places: in the advanced search form where you choose the terms that you will allow people to use as selection criteria, and in the list of terms that allow you to filter the results. Do you want to get rid of both? Or only one?

2) The advanced search can also be executed from the "simple search" form using a "query language" which is explained in the search tips - so just removing the advanced search form would not do much good.

3) The "node access" compatibility is limited: in particular, if certain nodes are excluded from the result list because of access rules, the taxonomy list filter will not be adjusted accordingly. For complete security it would be preferable to switch off the taxonomy results filter in this case.

Any thoughts on this?

seanberto’s picture

seanberto commented

Well first, thanks Joel, for following up. First, I should point out that I hadn't planned on migrating this site to 4.7, at least not any time soon. If you are going to make this fix, that would definitely be a deciding factor for me. See my answers in CAPS:

1) The "list of terms" actually appears in two places: in the advanced search form where you choose the terms that you will allow people to use as selection criteria, and in the list of terms that allow you to filter the results. Do you want to get rid of both? Or only one?

I'M MORE CONCERNED ABOUT DISPLAYING THESE CATEGORIES ON THE ADVANCED SEARCH FORM. I USE TAGNODE TO CREATE TAXONOMY TERMS. THE TAGNODES THEMSELVES ARE NOT PUBLICALLY VIEWABLE, HOWEVER THE TERMS CREATED BY TAGNODE APPEAR IN THE SEARCH CATEGORY LISTBOXES. SINCE THIS IS A RESEARCH SITE, IT TECHNICALLY ALLOWS OUTSIDERS TO SEE WHAT WE'RE RESEARCHING. IT'S NOT A HUGE SECURITY ISSUE, BUT NOT QUITE AS PRIVATE AS I WOULD LIKE. AS LONG AS A VISISTOR CAN'T STUMBLE UPON WWW.EXAMPLE.COM/TRIP_SEARCH AND SEE THESE CATEGORIES, I THINK THAT WE'LL BE OKAY.

2) The advanced search can also be executed from the "simple search" form using a "query language" which is explained in the search tips - so just removing the advanced search form would not do much good.

I'M NOT TOO WORRIED ABOUT THIS. I DOUBT THAT ANYONE WOULD "GUESS" AT TAXONOMY TERMS ON OUR SITE. AND AS DESCRIBED ABOVE, THEY WOULDN'T GET MUCH INFORMATION OUT OF A CORRECT GUESS, SINCE THE NODES THEMSELVES ARE RESTRICTED.

3) The "node access" compatibility is limited: in particular, if certain nodes are excluded from the result list because of access rules, the taxonomy list filter will not be adjusted accordingly. For complete security it would be preferable to switch off the taxonomy results filter in this case.

THAT'S FINE. I'M NOT WORRIED ABOUT THE RESULTS FILTER, JUST THE PUBLIC AVAILABILITY OF THE TRIP SEARCH FORM.

Thanks again, Joel. If there's anyway that I can help you with this, please let me know. I'm still a bit of a newbie and I don't have much money to make a donation to your efforts, but I can try to help as best I can. Thanks for being part of the community!

-sean