- Issue created by @kopeboy
- 🇧🇪Belgium dieterholvoet Brussels
Access is configured like this:
- If the administer nodes or edit co-authors of all content permission is granted, edit access is always allowed
- If the edit co-authors of own content permission is granted and you author the node, edit access is granted
- If the edit co-authors of co-authored content permission is granted and you co-author the node, edit access is granted
Maybe the consideration of the
administer nodes
permission feels unexpected to you? I did it because the description of that permission (Promote, change ownership, edit revisions, and perform other tasks across all content types) seemed to fit changing co-authors. Let me know if you feel like this does not make sense. - Status changed to Closed: works as designed
about 1 year ago 12:54pm 20 October 2023 - Status changed to Active
about 1 month ago 2:09pm 18 October 2024 - 🇮🇹Italy kopeboy Milan
Sorry for the late reply.. but had you actually tested what you said?
I just retried with a fresh install (this time v1.1.1 with Drupal 10.3.6) and I confirm the issue title: "Edit the co-authors of co-authored content" permission is (still) not respected.
Detailed steps to reproduce:
- Allow editing co-authors only to Editors & Admin:
- For completeness, these are the node edit permissions (Auth user can also create articles):
- Now log in as an Authenticated user and this is the /node/add:
He shouldn't, but he can edit the co-authors.
So your point 2 above is false:If the edit co-authors of own content permission is granted and you author the node, edit access is granted
that permission wasn't granted!
- Allow editing co-authors only to Editors & Admin:
- 🇧🇪Belgium dieterholvoet Brussels
You're right, seems like since any field access is allowed by default,
node_co_authors_entity_field_access()
should explicitly return forbidden instead of neutral as access result if access is not allowed. -
dieterholvoet →
committed 7f80a757 on 1.x
Issue #3386161 by dieterholvoet, kopeboy: Permission to edit the co-...
-
dieterholvoet →
committed 7f80a757 on 1.x