This module provides only "update" permission but no edit and no create.
So if I allow "update" permission to my users they can create nodes and assign terms to these + edit an existing node and assign a term to the edited node.
If I deny "update" permission they can create node but the node create form not contains term reference field and they can't edit the node.
My goal: users could create the node and assign it to the term but can't edit the node.
How should I configure the system to achieve my goal?

In my view the permission control povided by TAC module should be control just the term reference field editability independently from the whole node. E.g. if there was no other access control module which allow sy to edit a node then he should not edit it even though he has the TAC "update" permission to a term reference field in the node.

Comments

Dave Cohen’s picture

"update" is drupal's word for edit. Same thing.

This module uses Drupal's node_access features, which are built for view, update and delete. Create is controlled by Drupal's permissions. Basically this module grants additional privileges when a node is tagged with certain terms. Until a node is already created, it is not tagged with any terms.

You can create a scheme where users can view a node, but not update. Then they should see the terms in the form. Or, there is a checkbox for "visibility". If you want users to see terms even if they can't see nodes tagged with those terms, you need to configure tac_lite to not control visibility. Then the terms will appear on the node form and elsewhere on the site.

There's an additional module tac_create.module that is mostly from other user contributions. That is I don't use it myself. I don't think you need it for this case, but you could try enabling/disabling it.