I'm using 7.x-2.0-beta1+24-dev. I just happened to notice that when content is part of a group then group members can view it even if it is unpublished.
I have a node that is part of a group. If I log in as a test user with group access rights I can see nodes that are unpublished. If I edit the node and remove it from the group then the test user can no longer view the node. If I add the node back to the group then the test user can see it again. Is this normal? I don't think a user should be able to view unpublished content just because he is a member of the group the content belongs to.
Additional settings:
In Drupal permissions I have View own unpublished content on for everybody but Anon.
Comment | File | Size | Author |
---|---|---|---|
#4 | 1775568-og-node-unpublished-3.patch | 2.13 KB | amitaibu |
Comments
Comment #1
wimberb CreditAttribution: wimberb commentedNow running 7.x-2.0-beta1+41-dev (2012-Sep-13) and this issue is still present. I just wanted to bump this back up and see if anyone has a solution to prevent group members from viewing unpublished content.
Comment #2
spacereactor CreditAttribution: spacereactor commentedTry using panels, http response code, Selection rules unpublished node & roles to redirect them to frontpage or custom node.
Comment #3
wimberb CreditAttribution: wimberb commented@spacereactor Thanks for taking the time to present a possible solution. But I don't believe that would fit the bill.
First of all, the name of the unpublished content would still be visible, even though people would be prevented from actually viewing the contents.
Secondly, you shouldn't have to do something like that to prevent people from accessing unpublished content. If it is unpublished then nobody should be aware of its existence other than the admin and the author of the content. Just being a member of a Group should not give you access to unpublished content that belongs to that group.
Comment #4
amitaibuLets try this. With test.
Comment #5
amitaibuCommitted.
Comment #6
wimberb CreditAttribution: wimberb commentedThat seems to have taken care of it. Thanks again Amitaibu for all your hard work making OG a fantastic module.