We have an entityreference field (og_entityform_group_ref) on our entityform which references a node type that is marked as a public group type. We add two members to the group both with permissions to view and edit entityform submissions.

We submitted the entityform using member A account. Member A can see the submission in the submission list view and has access to view/edit links.

But, Member B can only see the list of submissions. The links to view and edit are hidden.

An access denied messages results if Member B tries to access the entityform submission via URL at sitename.com/entityform/[id].

Things we have done:

- reviewed OG role and user permissions, OG entityform permissions and entityform module permissions
- reviewed membership status/role for the group
- removed and re-added the membership for Member B

We would greatly appreciate additional assistance and guidance. Thanks!

Comments

hfarrier created an issue.

Argus’s picture

Argus commented

Created a view showing all Entityform submissions to test this. After setting the Permission in the view to "View published content", the users indeed can see their own Entityform submissions only. The OG permission "View all group form submissions" doesn't alter this. And setting the Permission in the view to OG permission, "view og entityform submissions" (view all group form submissions) that also doesn't change anything.

edit: Further testing: giving a user the Drupal permission to "View any entityform submission" DOES allow the user to view all submissions.

So I cannot confirm the issue in total, but the OG permissions do not seem to have any effect.

hfarrier’s picture

hfarrier commented

I can confirm the same. If we change the Drupal permission to "View any entityform submission", group members can see their own, other group members AND see all other group entityform submissions (as expected). Granting OG members the ability to "View all group form submissions" and "Edit all group form submissions" does not give members of the same group view/edit access to group entityform submissions.

hfarrier’s picture

hfarrier commented

Another observation, enabling/disabling Strict node access permissions in OG Settings has no effect on access to OG entityform submissions.

To reproduce:

-User A creates an entityform submission in Group A context
-Grant User B a Drupal User Role with ability to "Edit any entityform submission"
- Assign User B to Group B with OG member permissions to View but Not Edit group entityform submissions
-Login as User B and navigate to the entityform submission created by User A in Group A context

- Result: User cannot View Group A's form at site.com/entityform/id but they can Edit Group A's form at site.com/entityform/id/edit.

Since User B does not belong to Group A, they shouldn't have access to Entityform submissions submitted in Group A context when Strict Node Access Permissions is checked.

Yorgg’s picture

Yorgg commented

I also need "Edit all group form submissions" to my Organic group's group manager.
Anyone can hint on where to look? I am happy to provide a patch and make it happen, as it is necessary for me.