Problem/Motivation

AN/LU users have access to the unpublished content

Steps to reproduce

  • Create a topic with public/community visibility settings
  • Go to topic page as a AN/LU user
  • You havee access to this page but shouldn't

Proposed resolution

Needs logic improvements in the 'entity_access_by_field' module. Or rather in the class that is responsible for access to the content by visibility fields (EntityAccessHelper).

Comments

tBKoT created an issue. See original summary.

ribel’s picture

ribel
Primary language Ukrainian
Location 🇺🇦Lviv
commented
Status: Active » Reviewed & tested by the community

PR with the fix was merged and will be released in 10.0.11 and above.
https://github.com/goalgorilla/open_social/pull/2298

  • ribel committed 4ce209d on 10.0.x authored by tBKoT 
    Issue #3209766 by tBKoT: Improve access for unpublished content (#2298)
ronaldtebrake’s picture

ronaldtebrake commented
Status: Reviewed & tested by the community » Fixed

  • ribel committed a9d61e6 on 10.1.x authored by tBKoT 
    Issue #3209766 by tBKoT: Improve access for unpublished content (#2298)

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.