' . t('For more information, see the online handbook entry for Node module.', array('@node' => 'http://drupal.org/handbook/modules/node/')) . '
'; return $output; case 'admin/content/node': + case 'admin/content/node/all': return ' '; // Return a non-null value so that the 'more help' link is shown. case 'admin/build/types': return '' . t('Below is a list of all the content types on your site. All posts that exist on your site are instances of one of these content types.') . '
'; @@ -1249,6 +1250,10 @@ 'title' => t('Access content'), 'description' => t('View published content.'), ), + 'access content overview' => array( + 'title' => t('Access content overview'), + 'description' => t('List and filter available content from the administrative content pages.'), + ), 'bypass node access' => array( 'title' => t('Bypass node access'), 'description' => t('View, edit and delete all site content. Users with this permission will bypass any content-related access control. %warning', array('%warning' => t('Warning: Give to trusted roles only; this permission has security implications.'))), @@ -1601,14 +1606,22 @@ 'title' => 'Content', 'description' => "View, edit, and delete your site's content.", 'page callback' => 'drupal_get_form', - 'page arguments' => array('node_admin_content'), - 'access arguments' => array('administer nodes'), + 'page arguments' => array('node_admin_content', TRUE), + 'access callback' => 'node_content_page_access', ); - $items['admin/content/node/overview'] = array( - 'title' => 'List', + $items['admin/content/node/user'] = array( + 'title' => 'My content', 'type' => MENU_DEFAULT_LOCAL_TASK, - 'weight' => -10, + ); + + $items['admin/content/node/all'] = array( + 'title' => 'All content', + 'description' => "View, edit, and delete your site's content.", + 'page arguments' => array('node_admin_content'), + 'access callback' => 'node_content_page_access', + 'type' => MENU_LOCAL_TASK, + 'weight' => 5, ); $items['admin/content/node-settings'] = array( @@ -2229,6 +2242,33 @@ } /** + * Checks whether the current user has access to the content list page. + */ +function node_content_page_access() { + // If the user has no permission to access content, deny. + if (!user_access('access content')) { + return FALSE; + } + + if (!user_access('access content overview')) { + return FALSE; + } + + $types = node_get_types('types'); + foreach ($types as $type) { + $permissions = node_list_permissions(check_plain($type->type)); + $permissions['administer nodes'] = 'administer nodes'; + foreach (array_keys($permissions) as $permission) { + if (user_access($permission)) { + return TRUE; + } + } + } + + return FALSE; +} + +/** * Generate an SQL join clause for use in fetching a node listing. * * @param $node_alias Index: modules/node/node.test =================================================================== RCS file: /cvs/drupal/drupal/modules/node/node.test,v retrieving revision 1.14 diff -u -r1.14 node.test --- modules/node/node.test 9 Jan 2009 16:19:55 -0000 1.14 +++ modules/node/node.test 13 Jan 2009 20:37:20 -0000 @@ -598,4 +598,48 @@ $node = $this->drupalGetNodeByTitle($edit['title']); $this->assertNoRaw(theme('node_submitted', $node), t('Post information is not displayed.')); } -} \ No newline at end of file +} + +class ContentAdminPagesCase extends DrupalWebTestCase { + /** + * Implementation of getInfo(). + */ + function getInfo() { + return array( + 'name' => t('Content Admin Pages'), + 'description' => t('Create users and content to test the content admin pages functionality.'), + 'group' => t('Node'), + ); + } + function setUp() { + parent::setUp(); + $this->admin_user = $this->drupalCreateUser(array('access administration pages', 'administer nodes', 'bypass node access')); + $this->base_user = $this->drupalCreateUser(array('access content overview', 'edit own page content', 'create page content')); + } + function testContentAdminPages() { + $this->drupalLogin($this->admin_user); + + // Ensure the admin user can edit any content. + $created_node = $this->drupalCreateNode(array('type' => 'page')); + $this->drupalGet('admin/content/node'); + $this->assertResponse(200); + $this->drupalGet('admin/content/node/all'); + $this->assertResponse(200); + $this->assertText('edit', t('Admin user has edit link.')); + $this->drupalLogout(); + + // Ensure users don't see edit links for content they don't have rights to edit. + $this->drupalLogin($this->base_user); + $this->drupalGet('admin/content/node/all'); + $this->assertResponse(200); + $this->assertText($created_node->title, t('Unprivileged users can view content.')); + $this->assertNoText('edit', t('Edit links do not show up for users without rights.')); + + // Ensure users content shows up on their 'My Content' page, and they have edit links. + $user_node = $this->drupalCreateNode(array('type' => 'page', 'uid' => $this->base_user->uid)); + $this->drupalGet('admin/content/node'); + $this->assertText($user_node->title, t('Users own content is displayed')); + $this->assertNoText($created_node->title, t('Nodes not belong to user are not displayed')); + + } +} Index: modules/system/system.install =================================================================== RCS file: /cvs/drupal/drupal/modules/system/system.install,v retrieving revision 1.296 diff -u -r1.296 system.install --- modules/system/system.install 9 Jan 2009 16:19:55 -0000 1.296 +++ modules/system/system.install 13 Jan 2009 20:37:20 -0000 @@ -362,6 +362,7 @@ // Authenticated role permissions. db_query("INSERT INTO {role_permission} (rid, permission) VALUES (%d, '%s')", 2, 'access comments'); db_query("INSERT INTO {role_permission} (rid, permission) VALUES (%d, '%s')", 2, 'access content'); + db_query("INSERT INTO {role_permission} (rid, permission) VALUES (%d, '%s')", 2, 'access content overview'); db_query("INSERT INTO {role_permission} (rid, permission) VALUES (%d, '%s')", 2, 'post comments'); db_query("INSERT INTO {role_permission} (rid, permission) VALUES (%d, '%s')", 2, 'post comments without approval'); Index: profiles/default/default.profile =================================================================== RCS file: /cvs/drupal/drupal/profiles/default/default.profile,v retrieving revision 1.33 diff -u -r1.33 default.profile --- profiles/default/default.profile 9 Jan 2009 16:19:55 -0000 1.33 +++ profiles/default/default.profile 13 Jan 2009 20:37:20 -0000 @@ -153,6 +153,8 @@ menu_link_save($link); $link = array('link_path' => 'admin/build/menu-customize/secondary-menu/add', 'link_title' => 'Add a secondary menu link', 'menu_name' => 'secondary-menu'); menu_link_save($link); + $link = array('link_path' => 'admin/content/node', 'link_title' => 'View content', 'menu_name' => 'navigation', 'plid' => 0, 'weight' => '3'); + menu_link_save($link); } /**