All node types enabled on the site are displayed in the select box that shows the target node options irrespective of the fact that only admin users have permission to create content using certain content types on my site such as the page content type. I would like to change this such that the options displayed in the target node select box are filtered based on the permissions that the logged in user has. In that case the only node options displayed in the target node select box are those over which the logged in user has create content permissions.

How do I do this?

Comments

hitfactory’s picture

hitfactory commented

The loop at line 113 of createfromweb.module needs a node_access check.

Change

foreach ($node_types as $type) {
	  $types[$type->type] = $type->name;
}

to

foreach($node_types as $type) {
  if (node_access('create', $type)) {
     $types[$type->type] = $type->name;
  }
}