Hi everyone,

I have a site with categories of content for which I restrict user access by role (e.g. anonymous users and registered users) via the taxonomy_access module. My "primary links" to these items, it seems to me, used to be hidden in 4.6 for those target pages for which the current user did not have view permission. (for example, a link to user settings or the like would be hidden for anonymous users).

I'm now upgraded to 4.7 (great job everybody, by the way) and everything seems to be fine but, curiously, the function I mentioned above seems to be missing. Everyone sees all the links all the time, even if they are to pages that will just say "access denied". Two questions:

1) does anyone know if this is just me experiencing this issue or if something has really changed in 4.7?
2) any workarounds?

Thanks everyone.

Kenny

Comments

kyouens’s picture

A forum search shows that at least one other person is having the same issue.

pancapangrawit’s picture

Not the same but maybe for the same reason?:

In my site anonymous users are not allowed to create any content. Nevertheless the 'create content'-link is also visible to anonymous users - and they will get this unfriendly "access denied" message.

So my variant of the question is: how to show the link to authenticated users and hide it from anonymous ones?

Best
.r.

kyouens’s picture

Thanks for the reply. Yours sounds like the same issue I'm having. Hopefully somebody has an answer.....

rcross’s picture

I just finished playing with the various access modules available for 4.7. Part of the reason i didn't like the taxonomy_access.module was for that reason. I hadn't used it for a 4.6 site, so I didn't know that was an error. One thing to test (and maybe for the other person too) is to check your access controls in the main area and see if switching off "access content" for anonymous users helps. However, I also found this problem quite annoying in general for the menus. I ended up using node_access_byrole.module and things seems to work just fine for me there. It also fit my site's work flow better which was the primary reason for switching away from taxonomy_access.

--Ryan

pancapangrawit’s picture

Thank you for your considerations. Do you happen to know whether node_access_byrole works with OrganicGroups?

Best
.r.

rcross’s picture

Well, I haven't tested if they work well together, so I don't know. However, i would also suggest looking at the node_access_arbitrator.module since it specifically tries to get multiple access methods to "play nice".

--Ryan

pancapangrawit’s picture

Thanks Ryan.
.r.

Lecter’s picture

Hello Ryan,

The node_access_byrole.module sounds like what I am looking for as well.

I am having trouble locating node_access_byrole.module. Can you point me in the right direction?

Thanks!

Jim

Lecter’s picture

Thanks Ryan!

I was going through http://drupal.org/project/Modules and I couldn't find it. Maybe because I had it set to display only 4.7 modules?

Off to install.

ryanrain’s picture

i too had this problem of the create content menu item showing even if the user doesn't have permission to see it. anyone know if this has this been posted as a bug yet? anyway, if you reset the "create content" menu item, it goes under the "content" menu item, which links to /node (ie. the homepage). i just changed the text for this menu item from "content" to "home" and positioned it to replace my previous homepage link.
-r