The next feature I need to implement for my site is control over who can post certain types of content.
There are 5 roles (or so), only two of whom should be able to post any kind of content. The other roles should only be able to make comments, and make forum postings.
However .. the "authenticated user" role gets to make blog postings, and I don't want them to be able to do so.
Here's what I've found:
admin / access control: There's a permission for "edit own blog", but under book there's both "create book pages" and "edit own book pages". Also there's both "create forum topics" and "edit forum topics". In other words, the access control doesn't offer a "create blog entry" permission.
My desire would be solved very quickly if there was a permission named "create blog entry".
Taxonomy access; admin/access control/category permissions: I don't understand this at all. It seems like it ought to do what I want, but the checkboxes I see just don't make any sense.
admin/content/configure/content types: This page lets you configure a lot of attributes of content types. I see on here three boxes of permissions settings, "Default View Permissions", "Default Edit Permissions" and "Permissions for permissions". Note there is not a "default create permissions". These may have come from the node_privacy_by_role module.