Access denied to Webform

Here is what appears to happen:

When an Administrator of an Organic Group with the proper permissions creates a Webform, access is denied to the Form Components and Results. Organic Groups User Roles 4.0 provides content access control. Content Access is not installed.

The webform is published, and the node_access table is properly configured as explained: http://drupal.org/node/226987 .

Content Access Permissions were rebuilt, cron was run, and all caching was turned off and the caches cleared.

And the Authenticated User is one of the "Roles that can submit this webform: "

When the Authenticated User is given the same permissions as the Administrator, then the Webform can be accessed by both the OG Adminsitrator and the Authenticated User, but then, of course, it can be edited by any authenticated user which violates the security policy and general use case.

OGUR and OG have also assigned the roles properly:

print_r($user);

[roles] => Array
(
[2] => authenticated user
[3] => Admin
[4] => GroupMember
)

Any idea how to troubleshoot?

Is there a weight I need to change in the database?

Should I put that code in og_user_roles.module here:


function og_user_roles_init() {
global $user;

// Try to determine group context using customized menu system functions.
$group_node = og_user_roles_determine_context();
// Assign additional user roles to current user (if any).
og_user_roles_grant_roles($user, $group_node);
}

I couldn't find hook_user or hook_init in the webform.module .

Thanks very much for helping. This is a new skill for me.

I changed the webform module weight in the system table to -2 since og_user_roles was -1. No change in behavior.

Changing back to -1.

The devel module is set properly and the node_access block shows that somehow the group context or role assignment breaks from "Edit" to "Form Components" in the webform. How does that happen for the same node?

username create view update delete
user NO: by the module YES: node access NO: node access NO: node access
admin YES: administer nodes YES: administer nodes YES: administer nodes YES: administer nodes

Roles from print_r($user); for "Edit":

[2] => authenticated user
[3] => Admin
[4] => GroupMember

Roles from print_r($user); for "Form Components":

[2] => authenticated user

Tried altering module weights in the system table, again, with different weights. No change in behavior.

OGUR -2
webform -1
OG 0

OGUR -2
OG 0
webform 1

Goz, thanks for the suggestion. Still trying to digest it.

I've tried focusing on the Webform module without luck.

In the webform module, on a separate VM, I tried changing the 'acccess callback' for:

node/%webform_menu/edit/components
node/%webform_menu/edit/components/%webform_menu_component
node/%webform_menu/edit/components/%webform_menu_component/clone
node/%webform_menu/edit/components/%webform_menu_component/delete

to . . .

'access callback' => TRUE,

Then, I saved the file, restarted MySQL and Apache. Disabled and enabled the Webform module. Toggled permissions.

Strangely, no change in behavior, at all.

Of course, OGUR 4.0, is still not showing the correct role for the user on node/%/edit/components/* while it does on node/%/edit. I really don't understand how this happens on the same node.

More and more pain.