On my site, I just checked with a registered user and i was able to edit someone else's gallery assist blog node. I checked and the permissions are "correct" and this box is unchecked.

Yeow.

CommentFileSizeAuthor
#6 gallery_assist.module.zip36.52 KBjcmc
#3 ga-perms.png128.64 KBStarminder

Comments

jcmc’s picture

jcmc commented
Status: Active » Postponed (maintainer needs more info)

Hello Starminder,

I can't understand what is the behavior. maybe it is my bud English. Please can you me better explain your issue???
I stand at the disposal to help.

Regards
Juan Carlos

jcmc’s picture

jcmc commented
Status: Postponed (maintainer needs more info) » Fixed

Hi,
this must be activate if the error persist.

Starminder’s picture

Starminder commented
StatusFileSize
new ga-perms.png128.64 KB

JC,

I will try to explain it this way:

Registered Users can create + edit own GA (permissions)

User1 (Registered) creates a blog with GA
User2 (Registered) clicks on teaser image and ... it looks to me like a permissions problem. User2 should not be able to edit User1 node.

See attached

User3 (Anonymous) clicks on teaser image and can also SEE the edit link, but if anonymous click on it they get access denied.

Starminder’s picture

Starminder commented
Status: Fixed » Needs work
jcmc’s picture

jcmc commented

ok, I investigate this asap

jcmc’s picture

jcmc commented
Status: Needs work » Needs review
StatusFileSize
new gallery_assist.module.zip36.52 KB

Hello Starminder,

I have the issue understand and found really a big bug regarding this thread.
Here the express corrected version for your site I commit and create the needed new release for that.

Thanks again

Starminder’s picture

Starminder commented
Status: Needs review » Reviewed & tested by the community

It works - so far no bad effects. Thanks!!

Please commit

jcmc’s picture

jcmc commented

very good ;-)

it is committed.

Regards
Juan Carlos

Starminder’s picture

Starminder commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.