'edit/delete any content' permissions do not imply 'view any'

Created on 2 December 2008, over 16 years ago
Updated 19 March 2025, 25 days ago

In some situations, users granted the 'edit any content' and/or 'delete any content' permission(s) are not able to view the nodes they can edit or delete. This is most apparent when considering unpublished nodes.

This could be fixed by implying this permission for any user granted the 'edit any' or 'delete any' permission, but a better, more secure solution is the addition of a new 'view any content' permission.

A seven-line patch is attached which provides this functionality, please consider for inclusion in future releases.

πŸ“Œ Task
Status

Needs work

Version

11.0 πŸ”₯

Component

node system

Created by

πŸ‡ΊπŸ‡ΈUnited States jtrudeau

Live updates comments and jobs are added and updated live.
  • Needs issue summary update

    Issue summaries save everyone time if they are kept up-to-date. See Update issue summary task instructions.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024