My permissions are set so that Anonymous Users can only view node content and Global Organic Group Non-Members can only subscribe to a group. As an Anonymous User, I was able to create group content but not a group itself.
I created two groups. One had the Group Register setting set as "Show on registration page" and the other was set as "Do not show on registration page." The one set to show on the registration page was the Group the Anonymous User could create content for. When I changed the second Group to match the first, it showed up as an available Groups audience for content.
It's my assumption that an anonymous user would not see any options for creating content and would not be able to add Group content as a non-member. Am I possibly missing a setting regarding the registration page or is this a bug?
Comment | File | Size | Author |
---|---|---|---|
#6 | ogbetatest1.sql_.zip | 186.03 KB | weekbeforenext |
Comments
Comment #1
amitaibuDoes it happen on a clean installation?
Comment #2
weekbeforenextI completely uninstalled 1.4 and then installed 2.0-beta1. I had issues migrating and upgrading to the new version. The site I'm working on is pretty fresh. Let me know if you need me to test in a completely new Drupal install.
Comment #3
amitaibu> Let me know if you need me to test in a completely new Drupal install.
Yes please, always before reporting a bug you should check.
Comment #4
weekbeforenextOkay. I installed on a brand new Drupal and I see the same issue. If a group is set to show on registration page in the group register field, an anonymous user can create content for the group.
Comment #5
amitaibu> Okay. I installed on a brand new Drupal and I see the same issue.
Can you please attach a db dump, with everything not related to OG disabled, with default theme -- so I can test it locally.
Comment #6
weekbeforenextAttached is a db dump.
Comment #7
amitaibuCommitted a fix, thanks for the report + db!
Comment #8
micheljohn CreditAttribution: micheljohn commentedcould anybody explain , how to install ?
Comment #10
jacobpov CreditAttribution: jacobpov commentedI can't seem to get it working any fix ? anonymous can still post
Comment #11
mvlabat CreditAttribution: mvlabat commentedI still have the bug. There's no fix. I think there should be more work on it.
Comment #12
mvlabat CreditAttribution: mvlabat commentedThis task seems refering to our problem:
#1906750: Create Group Content without beeing in a Group
Comment #13
Frank Ralf CreditAttribution: Frank Ralf commentedI have the same issue. Granting the OG permission "Edit own article content" makes anonymous users being able to edit any content.
Comment #14
SeanT CreditAttribution: SeanT commentedI'm experiencing the same issue. It seems to be coming from og_node_access, specifically these lines
Comment #15
SeanT CreditAttribution: SeanT commentedThis patch fixes it for me https://drupal.org/node/1910874
Comment #16
drupal3013 CreditAttribution: drupal3013 commentedI'm having the same problem but for drupal 6 not 7
Comment #17
fadgadget CreditAttribution: fadgadget commentedsame problem for me. anonymous users being able to post in a group which was set up to only let members and other site members (group non members) to post.
Comment #18
shushu CreditAttribution: shushu commentedCan you describe a clear scenario on 7.x-2.x in which anonymous and non-member can create group content without permission ?
Comment #19
brad.bulger CreditAttribution: brad.bulger commentedgroup node A and B have the same content type and each have custom OG permissions. user J is a member of both groups. J has "administer group" privilege on group A but not on group B.
if you create a group audience field that is able to use values from A & B's content type, then J will have create access on any content type that uses that group audience field.
that doesn't seem quite right to me.
Comment #20
brad.bulger CreditAttribution: brad.bulger commented