Problem/Motivation

The current implementation of the hook_node_grants() and hook_node_access_records() is incomplete because it doesn't explicitly grant access to published content. This results in any content with editors/reviewers not being viewable by other users, even when published since there are only workflow participant records in the node_access table.

Proposed resolution

Remove these implementations, since hook_entity_access is already implemented. Potentially revisit adding these in the future in a more fleshed out manner.

Remaining tasks

User interface changes

API changes

Data model changes

CommentFileSizeAuthor
#2 2857476-02.patch6.66 KBjhedstrom

Comments

jhedstrom created an issue. See original summary.

jhedstrom’s picture

Status: Active » Needs review
StatusFileSize
new6.66 KB

  • jhedstrom committed 545506b on 8.x-1.x
    Issue #2857476 by jhedstrom: Remove incomplete grants system
    
jhedstrom’s picture

Status: Needs review » Fixed

  • jhedstrom committed 545506b on 8.x-2.x
    Issue #2857476 by jhedstrom: Remove incomplete grants system
    

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.