Menu cache causes permission problem for delayed roles
onionweb - June 11, 2006 - 15:25
| Project: | Role Delay |
| Version: | 5.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | postponed (maintainer needs more info) |
Jump to:
Description
This doesn't really make sense, but:
1. Role delay promotes user to new role that has comment and node posting permissions.
2. User can only post comments, not nodes.
3. User's id is still in the role delay sql table.
4. If admin goes to "edit user" and saves user without changing any settings, user can now post nodes.
5. if admin does nothing, eventually user gets node posting ability, but after a much longer period than role-delay is set for.
#1
I think this has something to do with the menu cache.
After roledelay promotes a user to a role that has forum posting permissions, if the user clicks on "create content," the "create new forum post" link will be present in on the page, but not on the menu.
If the user clicks on the link on the page, he gets access denied.
#2
If the user then goes to my account | edit and saves teh page, the menu item appears and the access is no longer denied.
#3
The only way to fix this is to edit the forum.module (or any module whose permissions are set in a delayed role) and place the "node_add_forum" menu item outside the $may_cache block.
#4
changed title of issue.
#5
Drupal 4.7 and earlier is unsupported for roledelay. Please verify on Drupal 5 release.