Permission by Term module allowing access to unpublished content

Created on 24 November 2021, almost 3 years ago

Problem/Motivation

When using Permissions by Term (PbT) with Content Moderation module, PbT ignores the moderation state, allowing access to nodes in draft/archived (unpublished) states. PbT is NOT configured for Permission Mode, as this requires all content types to have an Access Control field assigned and populated - if not those content types are hidden. Our use case requires only some content types to be restricted (the others being public).

Steps to reproduce

  • Require and enable Content Moderation and Permissions by Term modules.
  • Configure Content Moderation with basic Editorial workflow (draft, review, published, archived) states.
  • Configure PbT taxonomy, add to a content type (ensure Permission Mode is NOT enabled).
  • Create content tagged to a term in the access control taxonomy and set to draft moderation state.
  • Create user with same access control term access (with authenticated user role, or any that does not have the 'View any unpublished content' permission)
  • Log in with new user, you will be able to access the draft (unpublished) content.
🐛 Bug report
Status

Active

Version

2.34

Component

Code

Created by

🇬🇧United Kingdom markhearton

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024