[development] with anonymous user able to edit nodes

[Idan Arbel]

Thanks for all the tips, I'll try disabling modules although I can't find
the reason why this would happen.

 

I can't assign the nodes to a different user because these nodes are used as
content profiles, and there can be only 1 per user. Some nodes will have
users attached to them but others won't at first.

 

As for the permission, the anon user doesn't have any content permissions
other than access content.

 

And the node type is a simple cck node type.

 

Idan

 

From: development-bounces at drupal.org [mailto:development-bounces at drupal.org]
On Behalf Of Randy Fay
Sent: Wednesday, July 21, 2010 3:52 PM
To: development at drupal.org
Subject: Re: [development] with anonymous user able to edit nodes

 

I know you checked perms, but this definitely sounds like 'edit own
<content>' permission. Normally there wouldn't be any consequence of an anon
user having that, but since you have anon nodes, if anon had that priv,
they'd be able to edit.

Also note that a cheap path forward is to use VBO or just the database to
change all your anon nodes to an appropriate user, which is probably a good
idea anyway.

-Randy

On Wed, Jul 21, 2010 at 5:13 AM, Idan Arbel <idan at arbel-designs.com> wrote:

Hello, 

 

I have strange critical issue with anonymous user being able to edit nodes.

 I have nodes created by anonymouse users (created using node import) and
any anonymous user can edit them. 

 

in the permissions anonymous user don't have permissions to edit anything.

 

Idan




-- 
Randy Fay
Drupal Module and Site Development
randy at randyfay.com
+1  970.462.7450

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/development/attachments/20100721/a045bdcf/attachment-0001.html