In the function biblio_access under the update operation "edit own biblio entries" permission is checked and if this is set and you are not the owner of the content you are explicitly denied.

This is not the expected behavior of the condition, it should grant the permission to "edit own biblio entries" (as it does in the preceding line) and do nothing otherwise. By returning false it prevents other node grants from taking place and disrupts modules like og. This is the standard looking at other access functions.

I have provided a patch attached.

If this feature is needed a setting could be added similar to 'biblio_view_only_own'.

Cheers,
Richard

Comments

rjerome’s picture

no patch, but it's really not required for such a small change.

Just looking at that and I guess that line really isn't needed at all is it?

Ron.

rbrandon’s picture

StatusFileSize
new594 bytes
jsagotsky’s picture

StatusFileSize
new782 bytes

#2 stopped applying for me. Here's an update.

rjerome’s picture

Status: Needs review » Fixed

committed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.