Nodes which are protected from viewing are still visible when addressing them with their url alias. When addressing them by node id (e.g. http://sub.domain.top/node/123) one gets an access denied as expected.

This problem obviously is most apparent and annoying when using pathauto.

Comments

robb’s picture

robb commented

That's not right! I will look at it next week wehn I shoudl have a chance to work on the module.