This is an extension to my feature request here: #789732: Add 'create' ACL operations support and can only be applied if that feature request is accepted.

I have privileged users (non-admin) who can create content types and set content-type permissions via this module.
When those users create a content type, they should be able to set who can/cannot create a node of that content type just like they can set whether that content type can be updated, viewed, and deleted.

As it stands now, if any user with said permissions creates a content type, they can never give anybody permissions to create content of that type.
Which makes no sense to me.

In the case of node-specific permissions, setting 'create' operation permissions is not provided.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

NikLP’s picture

Subscribe.

Seems like if we're exposing nearly all the content permissions via the interface, we might as well be exposing the create content permission as well really??

Also, am I correct in saying that the content access permissions screen directly reflects any existing permissions as set up in the default "node permissions" area, and we're just able to override that here? If so, that adds more credence to the idea mentioned above.

thekevinday’s picture

Status: Active » Needs review

Yes.

Content access and acl already reflect existing permissions set up in the default node permissions area.
This simply adds the "create permissions" to the content access interface.

As I mentioned already, there are users who need "create content-type" permissions and those users needs to be able to set who can create the new content-type as well as designate who can update, view, and delete the given content-type.
These users should not be able to access the global permissions interface and control the permissions to everything else on the system.

Also, the patch to ACL here: http://drupal.org/node/789732 is apparently not need after all.

thekevinday’s picture

This newer version of the patch removes the changes to rules, which was on a node-specific case.
Create access can only be specific to content-types and not the nodes of a given content-type.

Status: Needs review » Needs work

The last submitted patch, content_access-6.x-1.x-add_create_support-3.patch, failed testing.

thekevinday’s picture

Status: Needs work » Needs review
FileSize
6.08 KB

content_access_optimize_grants() seems to be for node-specific permissions where having create would not make sense. (please correct me if I am wrong).
content_access_delete_per_node_settings() also seems to be on a node-specific permissions and having create makes no sense.

Status: Needs review » Needs work

The last submitted patch, content_access-6.x-1.x-add_create_support-4.patch, failed testing.

klonos’s picture

+1 !!!

subscribing...

thekevinday’s picture

Status: Needs work » Needs review
thekevinday’s picture

The original patch had passed 3 weeks ago, but now fails.

I do not see anything wrong with the latest patch from #5.
Based on the test results from the original patch, the patch failing seems to be something wrong with the upstream code being tested against.

I will wait some time and re-test patch from #5.

janchojnacki’s picture

BJ___’s picture

BJ___’s picture

Issue summary: View changes

...simply changed link to the issue over at the ACL project to the [#???] format ;)

gisle’s picture

Issue summary: View changes
Status: Needs review » Closed (outdated)