I am trying to create a view showing a list of postings of a type. Some of these postings will be posted only to relationship networks, others will be public. Right now, even if the post to network button is checked, the listing still shows up in the view and seemingly anyone can click on it. I would like this view to not show rows that the user is not supposed to see (as defined by the relationships). I tried to create seperate views just for the relationships in case I could not get it to be as dynamic as that, but even with seperate views I am having trouble.

Comments

alex.k’s picture

alex.k commented

As far as I know Views would only show the node if the user can actually access it. So, if they can read the node even without UR-Node Access flag, then there's no way to hide from Views, either. Does your view show the links, but users get access denied when clicking them?

egsj’s picture

egsj commented

They are able to both see the node and access it even if the node is set to be posted to the relationship only and they are not a part of that relationship. Unfortunately its very important that if these are only posted to members of the relationship that nobody else gets to them.

As a fallback, is there an alternate way to just filter out all nodes posted to relationships and maybe create a second view only showing those?

alex.k’s picture

alex.k commented

I'd suggest you solve the root of the problem and deny access to nodes that are not supposed to be seen. Organic Groups or http://drupal.org/project/content_access might be helpful.

egsj’s picture

egsj commented

I'm not sure how either of those solve the above problem. In fact we're already making use of both. The problem with this is, these are postings that MAY be for the public or may only be for a network of friends. The hope was that the module's post to relationship feature would make this possible. Unless I'm looking at it wrong there isn't a permissions solution to this, because I can't blanket allow or blanket disallow access, its up to each poster to decide if this is for the public or only for people they have relationships with.

But the problem, again, is that views shows the listings either way (even to anonymous users!) and the actual access control functionality doesn't seem to be working. Its possible (and probably) a config error on my end, but posting it to a relationship does not seem to limit access in any way.

hellomobe’s picture

hellomobe commented

I have the same need. Did you figure this out? Subscribing

egsj’s picture

egsj commented

Still need a solution. I'm willing to sponsor further development to get this done.

mrf’s picture

mrf commented
Status: Active » Closed (fixed)

Assuming this request has been resolved. If you are involved in this issue and still having problems, feel free to re-open. If not please open a new support request describing your issue.