[drupal-devel] [bug] node access not working.

[gordon]

 Project:      Drupal
 Version:      cvs
 Component:    node.module
 Category:     bug reports
-Priority:     normal
+Priority:     critical
 Assigned to:  Anonymous
 Reported by:  gordon
 Updated by:   gordon
-Status:       active
+Status:       patch

Looking at this more, I beleive that this is critical because of the
incorrect checking of the node_grants hook every user is able to see
all nodes, but I have a feeling that they maybe able to see the teaser.

gordon



Previous comments:
------------------------------------------------------------------------

January 23, 2005 - 09:38 : gordon

Attachment: http://drupal.org/files/issues/node_22.patch (1.24 KB)

I have found that since the node_rewrite_sql() patch has been applied
the node_access doesn't seem to be working. I have tracked it down to
the node_access_join_sql() and node_access_where_sql in which it checks
for the existance of the access_grants hook.

This hook access_grants doesn't actually exist, and should really be
the node_grants() hook. This is actually stopping the
node_rewrite_sql() from working.

Attached is a patch to correct this.

-- 
View: http://drupal.org/node/16026
Edit: http://drupal.org/project/comments/add/16026