Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 PST on 31 March 2024, to get $100 off your ticket.
Currently anonymous users are able to post content. We should probably block it in commons_groups_og_user_access_alter().
Comment | File | Size | Author |
---|---|---|---|
#4 | Screenshot_5_8_13_5_50_PM.png | 78.41 KB | ezra-g |
#1 | 1984824_revoke-anonymous-access.patch | 620 bytes | itamar |
anonymous_post.png | 49.95 KB | itamar |
Comments
Comment #1
itamar CreditAttribution: itamar commentedPatch revokes anonymous users content creation access.
Comment #2
ezra-g CreditAttribution: ezra-g commentedWith this patch applied, anonymous users are still presented with the content creation short form. Initial debugging shows that this is true even though $access_create is correctly set to FALSE.
Comment #3
itamar CreditAttribution: itamar commentedI resolved the problem with the short form on #1969088: Changes to group browsing widget & user status updates.
The patch on #1 is still needed to fix the problem that the normal content forms are visible to anonymous users.
Comment #4
ezra-g CreditAttribution: ezra-g commentedWith #1, anonymous users are still able to access the node/add form when specifying a group in the URL.
Comment #5
itamar CreditAttribution: itamar commentedI'm unable to reproduce this problem;
I tried the patch attached here on an fresh 3.x installation, and verified that the anonymous user is blocked from the post creation form, also with an og_group_ref in the URL.
Comment #6
ezra-g CreditAttribution: ezra-g commentedI re-tested and this is working as expected. Apologies for the hiccup above. Committed - Thanks!
http://drupalcode.org/project/commons_groups.git/commit/343541a