Issue with og_forum [#160720]

Running Drupal 5.1, Notify 5.x-1.1 and Organic Groups (og) 5.x-3.1.
The notify module does not take into account organic group access control restrictions on nodes or comments.
Consequently a user who is not a member of a restricted organic group still receives email notifications on new content posted in this group.

Is maybe due to a misconfiguration of Notify/Organic Groups but I have a feeling this is more an incompatibility between the organic groups access control mechanism and the notify module.

Comments

Comment #1

hallman CreditAttribution: hallman commented 25 September 2008 at 20:30

Are there any mods or anything for this?

I finally have private groups with forums working as I'd like them to -- the posts are hidden from nonmembers and the forums are also hidden. But I have notification turned on for everybody and everybody gets the private posts in their email. I'm running Drupal 5.10, Organic Groups 5.x-7.3, og_forum 5.x-2.2, and Notify 5.x-1.1.

Notify is really helpful on my small intranets -- we want everyone to know when new content has been posted. But for one site we'd really like to have one private group.

Comment #2

matt2000 CreditAttribution: matt2000 commented 2 October 2008 at 20:58

Notify checks node_access() before including a node in an email, so more likely the problem is that your configuration is not correct, or possibly OG does not implement node access control in the standard way.

Why not use OG's built in email notifications?

Comment #3

hallman CreditAttribution: hallman commented 29 September 2008 at 21:18

Status:

Active

» Postponed (maintainer needs more info)

Thank you very much for your post! I think I was a little tired and not looking at my tests close enough.

When I tested again, the posts to OG do NOT get emailed to everyone. But the posts to og_forum DO get emailed. So I've probably got something set up wrong with og_forum. At least now I know where to look.

The site I'm working on is an intranet with few users from about 20 organizations. I have notification set on by default so everyone will know whenever something is posted. So far they like getting a once-a-day digest. Posts are infrequent. I'll have one private group for executive directors to discuss staffing issues and the like. Since they'll already get notified through the regular notification process (as members of the group), I'm setting the OG pages to not send email notifications. At least that's the way I think I want it to work.

Thanks again for pointing me in the right direction.