node access
What to do about node_access_rebuild()
So I am researching Taxonomy Access Control (TAC) and Domain Access (DA) integration (though this applies to Organic Groups (OG) and other modules as well). And here's the problem.
node_access_rebuild(), as far as I can tell, is only designed to work with a single access control system.
Node Access Manager
In the last week, I've helped two people deal with {node_access} table issues. http://drupal.org/node/197878 is fairly typical of this sort of problem.
Node Access is spooky stuff for most people, and there is generally no way to fix Node Access issues -- or bulk reset NA rules -- without writing SQL.
Least permissions and node_access
OK, so I'm working on integrating Domain Access with OG.
Problem is, the current node_access system uses OR based permissions. What I really need is the option to set AND based permissions. For example:
-- Current node_access rules
return TRUE IF (og == TRUE) OR (Domain Access == TRUE);-- Desired rules
return TRUE IF (og == TRUE) AND (Domain Access == TRUE);See http://drupal.org/node/191375 for a full discussion and some possible options.
