Cannot flag node without edit or delete permission (with VBO)

The problem is that node flagging is done via a node_operation, not an action. Node operations don't advertise whether they modify nodes or not, so in the spirit of security, VBO assumes that they do. In order to get around this, it would be necessary for third parties (e.g. the VBO admin) to inform VBO which node_operations are safe and which aren't. I'll consider this a feature request.

As a workaround, you can patch the declaration of function flag_node_operations() in flag.module as the following:

    $operations['flag_'. $flag->name] = array(
      'label' => $flag->get_label('flag_short'),
      'callback' => 'flag_nodes',
      'callback arguments' => array('flag', $flag->name),
      'behavior' => array(),
    );
    $operations['unflag_'. $flag->name] = array(
      'label' => $flag->get_label('unflag_short'),
      'callback' => 'flag_nodes',
      'callback arguments' => array('unflag', $flag->name),
      'behavior' => array(),
    );

The behavior entry explicitly informs VBO that flag operations do not modify the node.

Try clearing the cache. What doesn't work? What's the message that you get that indicates failure?

I've re-tested this patch successfully. Are you sure you don't have two versions of flag.module in your installation?

I meant look in your module folders to see if there aren't two copies of flags module.

If there's only one copy, please download the latest dev release of VBO and try again:
* Make sure the actions_permissions module is disabled.
* Does the bookmark action still appear in the operations list for non-admin users?
* If it does, try to execute the action. What is the exact error message that you get?

Can you let us know what you did to fix the problem?

Changing a module's code by hand can hardly be consitered "fixed".

Fixed with the attached patch. Committed to all versions of Flag.

Thanks quicksketch for taking the trouble to integrate with VBO!