The "Node access" and "Exclude unpublished nodes" data alterations currently only work on the indexed nodes themselves. When these nodes contain references to other nodes, no access checks are executed on the related nodes when indexing (and, in some cases, during searching).
While this is a technical restriction that's hard to circumvent, we should definitely make sure to communicate this properly to site builders so they won't have wrong expectations about the effect of using those data alterations.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | 2155127-1--node_access_warnings.patch | 1.54 KB | drunken monkey |
Comments
Comment #1
drunken monkeyHere would be a simple patch, adding warnings to the data alterations' descriptions that bring this problem to the user's attention. Maybe we should include a more thorough explanation of the problem either in the
README.txtor in the handbook and link to that from the descriptions?Or should we explain it at the top of the "Data alterations" form/fieldset in general for all such data alterations? The problem and its cause are basically the same for all of them, and do, e.g., also apply to the Bundle filter (though are certainly less likely to cause issues there).
Comment #2
drunken monkeyCommitted.