Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.I do want to build a site where users are totally moderated (both when posting stories and comments).
When a user sees an approved comment he/she wrote previously, there's the damned "Edit your comment" option, he/she may edit the comment and post it back, new version *is not* send again to the moderation queue, but simply it's immediately visible. This is a clear bypass of moderation!
| Comment | File | Size | Author |
|---|---|---|---|
| #10 | edit_send_to_queue_2.patch | 1.56 KB | edmund.kwok |
| #8 | edit_send_to_queue.patch | 1.58 KB | edmund.kwok |
| #7 | check_edit_wo_approval.patch | 770 bytes | edmund.kwok |
Comments
Comment #1
zakmck commentedI've changed function comment_access return value (in comment.module) with this:
return
user_access("post comments without approval") &&
$user->uid && $user->uid == $comment->uid && comment_num_replies($comment->cid) == 0;
Comment #2
moshe weitzman commentedComment #3
moshe weitzman commentedComment #4
Bèr Kessels commentedIt is a year since this was reported. Did the 4.5 drupal_goto's in the comment system fix this? If so, this should be closed.
Comment #5
jo1ene commentedI just tried this on my 4.6.3 system and the issue still exists. A user can edit their comment when approval is required. The solution is to disallow editing without approval when posting is not allowed without approval.
Comment #6
magico commentedVerified.
I think this needs a solution, because a user an post "nice" comments and then after approving he can edits and put only garbage or something like that without moderators knowing.
Comment #7
edmund.kwok commentedThis patch checks if the user is allowed to post comments without approval before showing the edit link.
Comment #8
edmund.kwok commentedAnd this patch allows edit, but sent the comment back to the approval queue if the user is not allowed to post comments without approval.
Not sure which solution is the best, comments? Suggestions? Or another solution?
Comment #9
magico commentedI think #8 is the correct solution because it follows the same comment workflow.
Comment #10
edmund.kwok commentedPatch #8 rerolled to latest HEAD. This patch returns an edited comment to moderation if the user is not allowed to post without approval.
Yeah, I agree that this follows the same workflow; allowing edit, yet there is still moderation.
Comment #11
drummLooks like this was applied.
Comment #12
(not verified) commented