Hi,

I'm very interested in this module, but have noticed it bypasses taxonomy access when producing feeds - so /crss shows every post made regardless of access settings.

The standard feeds generated by drupal are all restricted by taxonomy access, could the same thing be implemented for crss?

I'm not a coder, but once we've got some other things working on our site we'll be revisiting this and will post up any progress we make ourselves.

Thanks.

catch

Comments

gábor hojtsy’s picture

gábor hojtsy
he/him
Primary language Hungarian
Location Hungary
commented

Well, the current 4.7 code of commentrss uses db_rewrite_sql() on all node queries, which should make it taxonomy access compatible. I have not tested it though.

catch’s picture

catch
he/him
Primary language English
commented

it shows everything on my site regardless of taxonomy access settings.

tangent’s picture

tangent commented
Status: Active » Closed (won't fix)

As the new module maintainer, I have little inclination to support 4.7 and it's unclear if this issue even exists. I'm going to mark this as won't fix. If it is still an issue I'll happily review a patch.