[development] with anonymous user able to edit nodes

Idan Arbel idan at arbel-designs.com
Wed Jul 21 13:31:16 UTC 2010

Thanks for all the tips, I'll try disabling modules although I can't find
the reason why this would happen.


I can't assign the nodes to a different user because these nodes are used as
content profiles, and there can be only 1 per user. Some nodes will have
users attached to them but others won't at first.


As for the permission, the anon user doesn't have any content permissions
other than access content.


And the node type is a simple cck node type.




From: development-bounces at drupal.org [mailto:development-bounces at drupal.org]
On Behalf Of Randy Fay
Sent: Wednesday, July 21, 2010 3:52 PM
To: development at drupal.org
Subject: Re: [development] with anonymous user able to edit nodes


I know you checked perms, but this definitely sounds like 'edit own
<content>' permission. Normally there wouldn't be any consequence of an anon
user having that, but since you have anon nodes, if anon had that priv,
they'd be able to edit.

Also note that a cheap path forward is to use VBO or just the database to
change all your anon nodes to an appropriate user, which is probably a good
idea anyway.


On Wed, Jul 21, 2010 at 5:13 AM, Idan Arbel <idan at arbel-designs.com> wrote:



I have strange critical issue with anonymous user being able to edit nodes.

 I have nodes created by anonymouse users (created using node import) and
any anonymous user can edit them. 


in the permissions anonymous user don't have permissions to edit anything.



Randy Fay
Drupal Module and Site Development
randy at randyfay.com
+1  970.462.7450

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/development/attachments/20100721/a045bdcf/attachment-0001.html 

More information about the development mailing list