Permission by Term module allowing access to unpublished content

Created on 24 November 2021, about 3 years ago

Problem/Motivation

When using Permissions by Term (PbT) with Content Moderation module, PbT ignores the moderation state, allowing access to nodes in draft/archived (unpublished) states. PbT is NOT configured for Permission Mode, as this requires all content types to have an Access Control field assigned and populated - if not those content types are hidden. Our use case requires only some content types to be restricted (the others being public).

Steps to reproduce

Require and enable Content Moderation and Permissions by Term modules.
Configure Content Moderation with basic Editorial workflow (draft, review, published, archived) states.
Configure PbT taxonomy, add to a content type (ensure Permission Mode is NOT enabled).
Create content tagged to a term in the access control taxonomy and set to draft moderation state.
Create user with same access control term access (with authenticated user role, or any that does not have the 'View any unpublished content' permission)
Log in with new user, you will be able to access the draft (unpublished) content.

🐛 Bug report

Status

Active

Version

2.34

Component

Code

Created by

🇬🇧United Kingdom markhearton

Live updates comments and jobs are added and updated live.

Incomplete comments

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment 4 months ago →
🇦🇺Australia cb Sydney
Has this been resolved? Is it still an issue on the later versions?
Status changed to Closed: works as designed about 2 months ago11:56am 8 January 2025
Comment about 2 months ago →
🇩🇪Germany Peter Majmesku 🇩🇪Düsseldorf
I read your list for reproduction. If there is just a term related with the node, but no permissions for the term are set, then there is no permission restriction.

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024