Contrib.social

Menu links to unpublished nodes are visible to privileged users

Open on Drupal.org →
Created on 9 February 2016, almost 9 years ago
Updated 8 September 2024, 4 months ago

This issue originates from the Lightning → project (original issue is https://github.com/acquia/lightning/issues/93):

If you create a node in an unpublished state, and make a menu link to it, the menu link is visible to any user who has access to the node.

This is standard core behavior, but I can't shake the suspicion that it might be very confusing, and potentially alarming, to users. If the link shows up in the menu, they might think it's "published" -- because it has a link in the menu that looks like any other link. Or they might be perfectly clear that the content is unpublished, but the presence of the menu link, looking for all the world like any other, might lead them to think that their live site now has an invalid link in the menu.

I'm not honestly sure this is even a problem; I ran it past @tkoleary and he didn't think it had ever come up in usability testing, so maybe it's a non-issue. I felt it's worth mentioning anyway as something to consider for D9's UI.

Tagged for 9.x since it's a change in traditional UI behavior.

💬 Support request
Status

Closed: outdated

Version

11.0 🔥

Component
Node system  →

Last updated 4 days ago

No maintainer
Created by

🇺🇸United States phenaproxima Massachusetts

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Comment over 1 year ago →
    🇺🇸United States trackleft2 Tucson, AZ 🇺🇸

    I think we should add a style change for unpublished menu items , possibly adding an .unpublished class, instead of removing them from display, as the continue to be in the menu.

  • Status changed to Closed: outdated 4 months ago
  • Comment 4 months ago →
    🇳🇿New Zealand quietone

    The Drupal Core issue queue is not the ideal place for support requests (that option is mostly there for filing support issues for contributed modules and themes). There are several support options listed on our support page → (Community > Support at the top of Drupal.org) and there is Drupal Slack → . Drupal Slack and the Forums, which are our two main support mechanisms in the Drupal community.

    I am restoring the status set by @cilefen in #27.

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024