If the anonymous user owns a node and there is access control installed then they can often edit the node, which may not be desirable.

It would be good to check for nodes owned by uid 0. It would be ideal to check if they are editable by anon (looking in node_access for a grant_update =1 for that node, though even this doesn't eliminate all the false positives).

Comments

smustgrave’s picture

smustgrave commented
Issue summary: View changes
Status: Active » Closed (outdated)

Since its been about 12 years going to close this as outdated as I'm trying to move away from the 7.x stuff fully