Work out a query tag like node_access to prevent private groups from showing in Views, menu links, etc.

Comments

kristiaanvandeneynde created an issue. See original summary.

Pierre.Vriens’s picture

Pierre.Vriens CreditAttribution: Pierre.Vriens at In Petto commented

Hey Kristiaan,

I'm sure "you" understand exactly what you mean by this, where the need (or idea) originates from, and that you created this issue as a kind of placeholder (maybe "note to yourself"?).

Would you mind "ever" rephrasing this issue and its title (eg to "Prevent private groups from showing in Views, menu links, etc."), and add some more details about what all this is about? If you know any specific issues that could be addressed with this (new) feature, please add some type of link to them also.

Doing so may help to get other users to step in with variations of "yeh, that would be great", or "would this also solve the issue I'm facing like so and so?". And that in turn will give "you" a better idea of how much any of the module's users would consider this as high or low priority.

Just a suggestion, OK?

kristiaanvandeneynde’s picture

kristiaanvandeneynde
Primary language Dutch
Location Antwerp, Belgium
CreditAttribution: kristiaanvandeneynde at Deeson commented

The goal of this issue is to address the "leaking" of private groups into lists which were created through code or Views. Having an "access tag" would make sure that every group in a list is checked for access before being returned as a result just like nodes.

In D7 there is no such system at all for any non-node entities, so that's what this issue is about: adding it into Group. In D8 there will be such a system in the foreseeable future, seeing as I'm working on it right now: #777578: Add an entity query access API and deprecate hook_query_ENTITY_TYPE_access_alter()

I'd prefer it if someone were to step in and create a patch based on the node grant system already. Then I could verify it and add it into a later version.

Pierre.Vriens’s picture

Pierre.Vriens CreditAttribution: Pierre.Vriens at In Petto commented
Related issues: +#2295249: Setting Access Restriction in Views based on Group Role
Pierre.Vriens’s picture

Pierre.Vriens CreditAttribution: Pierre.Vriens at In Petto commented
Related issues: +#2636934: How to exclude a group from Views results and control visibility of its fields?
Soul88’s picture

Soul88
Primary language Ukrainian
Location Ukraine
CreditAttribution: Soul88 commented
Status: Active » Closed (outdated)

We thank everyone for their collaboration on this issue, but as the D7 version is no longer supported, we will now close all D7 issues to keep the issue queue a bit tidier. This information won't go anywhere, it just won't show up on the list of open issues anymore.

Please see: https://www.drupal.org/project/group/issues/3163655 and https://www.drupal.org/project/group/issues/3203863#comment-14100281 for more details.