Posted by Anonymous on January 5, 2015 at 6:10pm
I am having trouble with permissions in OA. I would like authenticated users to only view the site and create discussion posts and events. Yet when I log into my test authenticated user account it gives me the option to create documents for each section of the site.
In the authenticated user premissions. Nothing is checked in the Comment Alter, Node has only the view options checked.
I have already rebuilt permissions once. Am I missing something that is enabled?
Comments
Out-of-the-box, OA allows
Out-of-the-box, OA allows users to contribute to any of the sections of the spaces they belong to (unless sections are restricted to certain users, teams or groups).
If you want to restrict access to publishing certain content types on specific space, you have to override the space default permissions and roles (edit the space) and then untick the relevant permissions on the space permissions page (under the space config)
Space Override
I put a check in the Override Default space options box and also checked the Document Page box but the authenticated user still shows for creating docuument pages in each of the sections I have created. I also tried checking off all the boxes in Node Types that did not help either. Is there another configuration I am missing?
Space Override Worked
The Space - Override of default permissions - worked. I still need one other person to be an editor. In OA from all the documentation that I have read this far and as I understand it, editing and creating content permissions are directly controlled in the space permissions. So we have space permissions, group permissions and user permissions. Is there an hierarchy on how permissions are overwritten?
I have a private intranet that I need all staff to access and be able to have discussions on and add events to the calendar. I also need one or two staff members to be able to update pages and create new documents as needed.
OA is a fantastic distribution of Drupal and it makes it easy for someone like me to create a site that is secure and has control over access. Thanks
From
From https://www.drupal.org/node/2340349
"In OA, Groups are used for access control to Spaces. Space membership controls creation of content. So Group members can view content from all Sections that Group has access to, but only Space members can create content within that Space."
Does that help?
"Save as Draft" required by OA Permissions
Hi there
My goal is to remove the "save as draft" and "create new revision" options from a form block for creating new content.
I am using Advanced Form Block to remove some form elements, but it does not seem to control these.
Also, switching off revisioning from the content type does not seem to remove the option for "create new revision" when entering new content of that type.
One option (for the Save Draft problem at least) seems to be switching off the Save Draft module entirely.
The Save Draft module is required by OA Permissions.
I tried removing all permissions for the Save Draft module, but the option still appears on the form.
If I switch off OA Permissions I am sure all hell will break loose.
Is there a way of switching off Save Draft without breaking OA Permissions (and by extension, everything else)?
Many thanks
You have a 'Save content as
You have a 'Save content as draft' permission at admin/people/permissions.
I didn't try it, but disabling it should be sufficient.
"The Save Draft module is required by OA Permissions."
I may be wrong, but i think that it only requires it because OA Permissions seems to be an exported feature and the permission for Save Draft was included at the time.
In a way, it must be doing the job of a base config file for OA.
Save Draft is also called on others OA modules. Therefore there are more dependencies than just in OA Permissions, they just were forgotten in the code.
hook_form_alter()
@hazit,
Sadly, I don't think you can do this through the UI. However you can create a custom module and implement hook_form_alter(). Example
I believe the the "Save
I believe the the "Save content as draft" permission is only checked if a user doesn't have access to publish the node. After a second look I'm wondering if disabling this as well as "View unpublished nodes" permission would do the trick although that may be impractical.
Did you try disabling it for a particular content type in Structure > Content types? I don't recall there being an option there but am unable to have a look right now.
@othermachines. I just tried
@othermachines.
I just tried it in a test site. I disabled the 'Save content as draft' for authenticated users, made login with an authenticated user and the 'Save as Draft' disappeared.
Unfortunately, reading your comment i just realised that the question was for a particular content type, not for all of them :(
For your solution:
on oa_worktracker.module, there is inspiration:
<?php// Hide the 'Save as Draft' button because it doesn't do anything sane
// in conjunction with the 'Copy for multiple' functionality.
$form['actions']['draft']['#access'] = FALSE;
?>
in a hook_form_FORM_ID_alter(). So it would disable the access on a form base.