Edit button displayed, although user has no permission to edit the referenced node

Created on 1 September 2015, about 9 years ago
Updated 8 July 2024, 5 months ago

I am trying to find the right setup for following usecase:

Authenticated users (or other roles) are allowed to add new child nodes, but not to edit or delete existing child nodes.
So I checked the permissions on people/permissions :
Allowed to see add and edit buttons checked
Certain Content Type (Child nodes): Create new Content checked (all other edit any/own and delete not checked)

If a user with this role go to node add/edit parent form, both buttons (edit and add) are shown although the user has no permission to edit child nodes.
If the user click the edit button (pencil) the form is closed and a "Access denied" message is shown. The user has to find the "Browser Back Button" to return to the form.

What I expect or suggest:

Disable or hide the edit button, if the user has no permission to edit child nodes
or
Dont close the form and show a message on top of the form, that the user is not allowed to edit child nodes.

πŸ› Bug report
Status

Closed: outdated

Component

Code

Created by

πŸ‡©πŸ‡ͺGermany Micha1111

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡ΊπŸ‡¦Ukraine AstonVictor

    I'm closing it because the issue was created a long time ago without any further steps.

    if you still need it then raise a new one.
    thanks

Production build 0.71.5 2024