How to reproduce:

  1. In "Administration -> Configuration -> Organic groups -> OG permissions overview -> Node - Group permissions", add the "Add user" privilege to group members.
  2. As an anonymous user, open a group URL in the Drupal frontend. This page now has an added tab "Administer group" with an option to add members to the group.

In my understanding, this is non-desired behavior because I did not give the "Add user" privilege to non-members of the group. (And even if I had done so, it should probably still be forbidden for anonymous users?)

Comments

ezra-g’s picture

Project: Commons Groups » Drupal Commons
Version: 7.x-3.x-dev »
Component: Group Privacy » Groups

Moving to the main Commons issue queue - Thanks for the bug report.

ezra-g’s picture

Priority: Normal » Major
Status: Active » Postponed (maintainer needs more info)

I'm not able to reproduce this. Can you post any more steps to reproduce?

I'm in the #drupal-commons channel on IRC if you'd like to discuss in real-time. Thanks!

lsolesen’s picture

Version: » 7.x-3.x-dev
Issue summary: View changes