My test site has five different roles, each with different permissions to access the site. After uploading and enabling the playlist module, one of my roles continues to assume permission to create and edit audio. After removing the checkboxes and saving, no changes occur and the role still has incorrect permissions.

I have attached a document with screenshots showing exactly what it looks like.

CommentFileSizeAuthor
Drupal-Playlist-AccessControlIssue.doc86.5 KBAnonymous (not verified)

Comments

zirafa’s picture

zirafa commented
Assigned: Unassigned » zirafa

Hello,

Thank you for the detailed attachment. Are you running the latest audio and playlist modules? Are others having this same problem? A brief test on my own test site at playlist-demo.drupalart.org shows a similar problem. I'll look into this...

Farsheed

Anonymous’s picture

Anonymous (not verified) commented

I am on the latest version of both modules.

zirafa’s picture

zirafa commented

Upon further investigation, it appears that it is only the create/edit permission that are being reverted. If you remove "download audio" permissions but keep create/edit, "download audio" does not revert. It also appears that there are distinct permissions relationships:

  • If "create audio playlist" is enabled, "create audio" becomes automatically enabled.
  • If "edit audio playlist" is enabled, "edit audio" is automatically enabled.

I have a feeling this is a drupal bug...I will test it later.

Anonymous’s picture

Anonymous (not verified) commented

For me now I'll create some admin playlists but it would be nice to see this solved as the users that I want to create playlists won't have the permissions to upload new audio. I'm not good with the code but I would certainly volunteer to test prospective solutions.

Rob
http://www.musicbuggy.com

zirafa’s picture

zirafa commented
Priority: Normal » Critical

This is a really weird and important bug that needs to be fixed.

zirafa’s picture

zirafa commented

Yargh! Still a major problem. I cannot for the life of me figure this one out - if anybody has any leads or ideas, please let me know. The only thing I could think of is that audio_playlist and audio permissions are getting mixed up because of the common prefix, "audio" but I don't think that is it.

exigent99’s picture

exigent99 commented

This is affecting me on my site as well. I would think it would be a common desire to have a group say all authenticated users be able to create playlists, but do not want them creating audio.

What is odd is that if you look at the DB tables the text perms listed for that role do not seem to include 'create audio', I wonder if it is being turned on in code, not stored in the DB?

zirafa’s picture

zirafa commented

Hm. But doesn't it still affect the permissions as if it was stored in the database?