Currently, TAC uses term_access as its only grant realm in hook_node_grants() and hook_node_access_records(). This corresponds to the old database schema.

The grant realm should instead include the module name, taxonomy_access. However, if we implement per-user access control in 7.x-2.x, would we need to introduce a second grant realm? (See #871572: Combine forces: merge TAC and TAC_Lite into one package in D7?).

Comments

xjm’s picture

So the realm names would be something like taxonomy_access_user and taxonomy_access_role. I'm not sure whether or not this would be necessary if we implement access profiles.

Also, this change would need to add a hook_update_N() flagging node access for rebuild (to update the realm name in the node access table).

xjm’s picture

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.