Controlling access to nodes by simple user relationships

Events happening in the community are now at Drupal community events on www.drupal.org.
tedbow's picture
Posted by tedbow on January 27, 2012 at 7:42pm

I looking for solution or ideas about how to solve this problem in Drupal 7.

I am going to have a site where users will be working in pairs. One user(Poster) will be posting nodes and another user(Viewer) should have View access to posters nodes. Nobody else outside of these 2 users should be able View the the Posters nodes.

I have thought using the User Relationship module, but it seems overly complicated for what I am trying and would present other problems for my purposes.

I have thought about solving this problem with custom code and the ACL module.
Here is my idea for that:

<

ol>

  • Add User Reference field on the User object that would only be available to users who have the Poster role.
  • Each Poster would have ACL list for their nodes
  • Add the User referenced in the User Reference Field above to the ACL list for the Poster.
  • When the Poster adds a node. It would added it to their ACL list

    • <

    ol>

    I am not sure if this is a bad idea to have list for each user with the Role Poster(half the users on the site).

    Any ideas?

    Thanks

    Categories: , ,

    Comments

    Perhaps use Organic Groups?

    Posted by ressa on January 31, 2012 at 8:54pm
    ressa's picture

    I have faced a similar challenge, and I think Organic Groups is the solution for you. If you set both the Group and Group content types as Private, and create a group for each pair, the Poster and the Viewer will be living in their own space, and nobody else will be able to see their content.

    You then create Drupal roles for the Poster and Viewer, grant the Poster "Create new content" permissions, the Viewer "View" permissions, and you should be set :-)

    thanks

    Posted by tedbow on February 1, 2012 at 2:41pm
    tedbow's picture

    Ressa, thanks for the advice. I thought about that but thought there would be more configuration and custom programming to get exactly what I wanted(didn't want the users to have to think about it at all). I went with the ACL method actually it was pretty simple. Also as a bonus I learned more about how the node access system works and how to use the ACL API.
    Thanks.

    Core developer

    _

    Posted by ressa on February 1, 2012 at 3:05pm
    ressa's picture

    That's great. You're right, I did have to make a custom module to set new content as Private by default, and deny access to the field, but apart from that, not too much. I think all Posters will have their own Group, so they shouldn't have too much thinking to do, I hope :-)
    I am interested in your solution though, would you care to share it?

    Did you find a solution?

    Posted by kingswoodute on February 20, 2013 at 4:10am
    kingswoodute's picture

    Hi Tedbow,

    Did you find a solution. I need to implement a pretty similar use case.

    I'm trying to make it work currently with User Relationships.

    Thanks and have a great day.

    Access Control

    Group organizers

    Group notifications

    This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: