- π¬π§United Kingdom Dubs
This patch works for me too - please can this be merged in?
Expected behavior: Creating a new node and relating a node have different permissions.
Actual behavior: Both use the permissions for relating a node.
The routes for group/{group}/node/create and group/{group}/node/add set a flag called $create_mode to signify which of the two is being done.
However, as the permissions go through the core entity layer, that flag is lost. When GroupContentAccessControlHandler::checkCreateAccess() checks the permission it only calls GroupContentEnablerBase::createAccess() which is appropriate when we're relating/adding existing node but not creating a new one.
GroupContentAccessControlHandler::checkCreateAccess() needs to have an if/else somehow and call createAccess() for /add (relating) or createEntityAccess() for /create
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
This patch works for me too - please can this be merged in?