Access Permissions Affected by Playlist Module
awakenedvoice - July 12, 2006 - 15:11
| Project: | Playlist (toolkit, modules) |
| Version: | 4.7.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | critical |
| Assigned: | zirafa |
| Status: | active |
Jump to:
Description
My test site has five different roles, each with different permissions to access the site. After uploading and enabling the playlist module, one of my roles continues to assume permission to create and edit audio. After removing the checkboxes and saving, no changes occur and the role still has incorrect permissions.
I have attached a document with screenshots showing exactly what it looks like.
| Attachment | Size |
|---|---|
| Drupal-Playlist-AccessControlIssue.doc | 86.5 KB |
#1
Hello,
Thank you for the detailed attachment. Are you running the latest audio and playlist modules? Are others having this same problem? A brief test on my own test site at playlist-demo.drupalart.org shows a similar problem. I'll look into this...
Farsheed
#2
I am on the latest version of both modules.
#3
Upon further investigation, it appears that it is only the create/edit permission that are being reverted. If you remove "download audio" permissions but keep create/edit, "download audio" does not revert. It also appears that there are distinct permissions relationships:
I have a feeling this is a drupal bug...I will test it later.
#4
For me now I'll create some admin playlists but it would be nice to see this solved as the users that I want to create playlists won't have the permissions to upload new audio. I'm not good with the code but I would certainly volunteer to test prospective solutions.
Rob
http://www.musicbuggy.com
#5
This is a really weird and important bug that needs to be fixed.
#6
Yargh! Still a major problem. I cannot for the life of me figure this one out - if anybody has any leads or ideas, please let me know. The only thing I could think of is that audio_playlist and audio permissions are getting mixed up because of the common prefix, "audio" but I don't think that is it.
#7
This is affecting me on my site as well. I would think it would be a common desire to have a group say all authenticated users be able to create playlists, but do not want them creating audio.
What is odd is that if you look at the DB tables the text perms listed for that role do not seem to include 'create audio', I wonder if it is being turned on in code, not stored in the DB?
#8
Hm. But doesn't it still affect the permissions as if it was stored in the database?