Hi,

i have never posted anything so I'm not sure if I'm doing this correctly.

The problem is as followed:
I have a site that's meant for members of a student association and there is a security problem. Only authenticated users should have access to forum topics or comments, but when an anonymous user enters the exact url of a node (for instance; ../node/345) they can read everything.
At the moment, I have closed the site completely for anonymous users by unchecking the 'access to nodes' button in 'access rights'. But then, anonymous users aren't allowed to see the introductory text or the photo impression that's meant for people visiting the site. I want them to be able to see all the things that are available to everyone, but they can't see private forum topics, comments or private photo albums.

I'm using drupal 6.6 with the content_access 6.x-1.0-beta1 and forum_access 6.x-1.x-dev installed. I don't have a url module installed of any kind and the only thing anonymous users are allowed according to 'access rights' is 'view photo' under 'module photos'.

Is there something I need to turn off or on? Do I need to install another module? I've searched the drupal.org site for a few hours, but I couldn't find anything on this problem.

- WouterKouw

Comments

emptyvoid’s picture

emptyvoid CreditAttribution: emptyvoid commented
Status: Active » Closed (won't fix)

Well, first off this is the node_access module not the content_access module. if you want support for that module please post in that project.

http://drupal.org/project/content_access