Closed (fixed)
Project:
Node Comments
Version:
5.x-1.x-dev
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
11 Jul 2007 at 08:33 UTC
Updated:
9 May 2010 at 19:36 UTC
I noticed that the "create comment content" user access control settings for the regular node module can override the settings for the nodecomment module. So essentially, there are two places where access is granted to create comments. The site administrator could easily forget or overlook this when setting a site's commenting permissions.
Since it would be difficult to disable the "create comment content" functionality in the core node module, I believe something should be done to remove this duplication of access control in nodecomment. If this is undesirable, then there should at least be some kind of warning to the administrator.
Comments
Comment #1
robertdouglass commentedI agree and am going to start a separate issue for a general access audit of this module.
Comment #2
crea commentedD5 branch is not supported anymore. Closing.
Please reopen if the issue is relevant with Nodecomment 6.x-2 branch.