Contrib.social

Unpublished node should never be shown to a role permission to see unpublished

Open on Drupal.org →
Created on 14 April 2025, 12 days ago

Problem/Motivation

Node unpublished are shown to user regarding the rule defined in the nodeaccess config. But unublished content not be displayed to users if they don't have a specific permission. That's a privilege for Editors and admins.

Steps to reproduce

  1. On an unpublished node, go to the "node access" config, check the "view" checkbox and save.
  2. Rebuild the permissions.
  3. With a simple user Authenticated visit the unpublished node. I will see it but you should not...

Proposed resolution

Two solutions:

  1. Add new grants on view, edit, delete for unpublished nodes
  2. Just add a check on unpublished nodes iin the hook_node_access_records and return the "default" grants.

Remaining tasks

  1. Patch
  2. Tests
🐛 Bug report
Status

Active

Version

2.0

Component

Code

Created by

🇨🇭Switzerland redzeuf Geneva

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024