Can't Restrict Access for a Role [#190352]

I'm using Path Access and Access Content modules to accomplish the following:

1. Using Access Content to restrict certain content types to a specific role (e.g. managers)
2. Using Path Access to restrict a certain role to specific pages

I thought I had this working but it's not anymore. Basically authenticated users have access to almost any area on our site (except for a couple of content types). I have one role which I need to restrict access to a few certain pages. However from what I can tell, Drupal thinks that since the people in this role are also authenticated users, they are allowed access to pretty much everything.

We have a number of users and pages so I don't want to have to create a separate role for everybody except these restricted people. I'd rather have everyone as just 'authenticated users' and restrict page access for the small group of people who can't view much on our site.

Any ideas?

Comments

Comment #1

vm commented 8 November 2007 at 03:24

I believe access controls are inhertited from authenticated. if authenticated has a permission, then any role created beyond authenticated will also have this permission whether checked or not.

Comment #2

rgraves commented 8 November 2007 at 14:23

Shouldn't using "Role Weights" allow me to assign a higher priority to the role that restricts access to certain users over the authenticated user role?

Comment #3

rgraves commented 8 November 2007 at 18:04

I think I got it working. One piece that we found confusing was in Role Weights, it said "Set a lower number to have this role take precedence over other roles." So we were setting the higher priority role to say -5 and the authenticated user to say +5.

When I looked at your README.txt file, it said "The role with the highest weight number is used, other roles are ignored." This appears to be correct.

I will put a note on the Role Weights issue page to consider rewording it to make it more clear.