I was hoping that this module would allow TAC + ACL + Content Access to co-exist on my website, however it doesn't seem to be working. I was originally using TAC only for my permissions. I then wanted to add ACL + Content Access as required by the UC_Access_Node module in order to sell access to particular nodes.

With a quick test all seems to be working EXCEPT in one case. I am using TAC to prohibit access to a particular taxonomy for all roles by default and then granting access to particular roles for particular terms within that taxonomy. Since I have installed ACL + Content Access + Module Grants now the behavior is that the all nodes tagged with anything in that taxonomy are now accessible by all roles. I had tried various combinations of the Module Grants settings without success. I have rebuilt perms after changing the Module Grants settings though it doesn't ask me to do that.

Any ideas what I am doing wrong? Thanks for any help.

Comments

webservant316’s picture

Oh perhaps the defaults from Content Access are grants for all, so the thumbs up from that module gives the access even though my TAC is configured to deny.

I think I want Content Access defaults to be neutral if possible for all nodes and rely solely on my TAC permissions and in the case where I want to sell access to a node with uc_node_access then use content_access to grant the permission.

I think that would work with your module. Hmm wonder if I can change the content access defaults to no grant or deny?

webservant316’s picture

Title: Not working for TAC + ACL + Content Access » Help needed for TAC + ACL + Content Access

Changed titled to reflect that this is a support request and hoping that this module can help me and that all I need to do it learn to use the module properly.

More detail on my configuration and problem. I was originally use the TAC module only with a default grant of global access to all content for all users, select taxonomy term use grants, and also a default deny access for my 'access' taxonomy. My 'access' taxonomy then used particular terms with TAC to grant access access to users with particular roles. This configuration works great.

Now enter the need to use Ubercart to sell access to particular nodes. Our company wants to sell online training courses and so we turned to the uc_node_access module. This modules requires the use of the modules ACL and content_access to accomplish its works. So now the challenge of getting content_access and TAC to work together, and so hoping module_grants can help me.

I am having trouble figuring out how to configure content_access and module_grants to cooperate with my existing TAC configuration. Maybe it is not possible. In brief content_access installs out of the box granting access to all content. This was bad for my TAC 'access' taxonomy permissions. Nodes that were restricted from certain use were now visible to everyone all the time. I messed with the options at admin/settings/module_grants, but couldn't get it to work.

Then I realized that content_access was granting access to all so module_grants could stop that. So I then turned off all grants in the content_access module thinking that the grants from my TAC module would persist if I told the module_grants to "don't care" if content_access perms where unchecked. However, this result in absolutely no content being accessible.

This all accessible or none accessible result seems like I must be mis-using the module. Any help would be greatly appreciated. In summary I want to use the TAC permissions I have be using to be the baseline permission and then use ACL and content_access to grant addition accessibility for nodes purchased using the us_node_access module.

Sincerely, Jeff

rdeboer’s picture

Jeff!
The trials and tribulations!
I've just read your ordeal, but cannot comment on it now, getting rather late here....
Have you activated the Module Grants Monitor module (part of the Module Grants download package) -- this may help you in zoning in on what role can view/edit what .... thus helping you to get a handle on the issues you are having...
Rik

webservant316’s picture

I'll check out the monitor and get back to you. Thanks.

webservant316’s picture

Hmmm installed the Module Grants Monitor, cool feature, but it is only telling me more of what I already know. I can only seem to get all or nothing with my configuration. I am doing some trickier stuff with TAC such as default deny access and grant if has a taxonomy term as well as default grants in other cases. Perhaps this is too complicated to simply AND and/or OR with content_access.

Any ideas? Anyone else have success with a goal similar to mine?

rdeboer’s picture

Bummer.
Don't know enough about your use-case, but would TAC-Lite instead of TAC do the job?
In addition to per-role grants, TAC-Lite also has per-user grants, which may come in handy.

webservant316’s picture

I am using TAC for both taxonomy term accessibility and node accessibility. I think if I use TAC for term accessibility only that then it will work. I'll let you know :-)

rdeboer’s picture

For even more debug info, see the comment made in this issue: #1199096: does module grants work with all access control modules?.

webservant316’s picture

ok, got it working.

I am using TAC + ACL + Content_Access together, but without Module Grants. I have been using TAC alone but needed to add ACL + Content_Access for uc_node_access. So I quit using TAC for node access permissions, but only for term access permission and use ACL + Content_Access for content permissions and all seems to work well for my use case.

Thanks.

rdeboer’s picture

Status: Active » Closed (works as designed)

If the access grants of the modules in question apply to different types of objects then AND-ing vs OR-ing of nodes does not apply, so you would indeed not need Module Grants.
Closing.

webservant316’s picture

thanks, good day.