The "Node access" and "Exclude unpublished nodes" data alterations currently only work on the indexed nodes themselves. When these nodes contain references to other nodes, no access checks are executed on the related nodes when indexing (and, in some cases, during searching).
While this is a technical restriction that's hard to circumvent, we should definitely make sure to communicate this properly to site builders so they won't have wrong expectations about the effect of using those data alterations.

Comments

drunken monkey’s picture

Status: Active » Needs review
StatusFileSize
new1.54 KB

Here would be a simple patch, adding warnings to the data alterations' descriptions that bring this problem to the user's attention. Maybe we should include a more thorough explanation of the problem either in the README.txt or in the handbook and link to that from the descriptions?
Or should we explain it at the top of the "Data alterations" form/fieldset in general for all such data alterations? The problem and its cause are basically the same for all of them, and do, e.g., also apply to the Bundle filter (though are certainly less likely to cause issues there).

drunken monkey’s picture

Status: Needs review » Fixed

Committed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.