For some reason all anonymous users can view unpublished content. Using devel node access I can see it's gnode that is granting the permission. The anonymous role doesn't have bypass node access enabled and I can't see any other option within group to allow anon users to override node access permissions.

Debugging using xdebug I can see that it hits gnode_node_access() with the create $op every time I access the page as anon. It then exits with NODE_ACCESS_IGNORE since none of the checks match.

I'm not familiar with this module so I'm not sure where to look to fix this issue so appreciate any guidance.

CommentFileSizeAuthor
#3 group-2784221-3.patch4.97 KBkristiaanvandeneynde
#2 group-unpublishedstatus-2784221-2.patch1.07 KBmikebell_
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

mikebell_ created an issue. See original summary.

mikebell_’s picture

mikebell_ CreditAttribution: mikebell_ at Convivio commented
Status: Active » Needs review
FileSize
group-unpublishedstatus-2784221-2.patch1.07 KB

Here is a patch which fixes this. Thanks for the help Kristiaan

kristiaanvandeneynde’s picture

kristiaanvandeneynde
Primary language Dutch
Location Antwerp, Belgium
CreditAttribution: kristiaanvandeneynde at Deeson commented
FileSize
group-2784221-3.patch4.97 KB

This is more along the lines of what we discussed.

mikebell_’s picture

mikebell_ CreditAttribution: mikebell_ at Convivio commented

Thanks for the updated patch, tested on my local dev site and works fine.

harivenuv’s picture

harivenuv
Location India
CreditAttribution: harivenuv at Zyxware Technologies commented

Hi,

Thanks for the patch (group-2784221-3.patch). Tested in my local and work fine.

kristiaanvandeneynde’s picture

kristiaanvandeneynde
Primary language Dutch
Location Antwerp, Belgium
CreditAttribution: kristiaanvandeneynde at Deeson commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.