Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I want to see all unpublished content #1198

Closed
kmranjo opened this issue May 13, 2024 · 3 comments
Closed

I want to see all unpublished content #1198

kmranjo opened this issue May 13, 2024 · 3 comments
Assignees
Labels
Eng Iteration Minor improvement based on feedback

Comments

@kmranjo
Copy link
Collaborator

kmranjo commented May 13, 2024

Current state

When viewing a content dashboard (/admin/content), users with the System Admin role are able to view all content regardless of publication status. However, all other users are unable to view any content where the publication status is unpublished.

Desired change

All users regardless of role should be able to view all content that they have permission to view, regardless of publication status.

@kmranjo kmranjo added the Eng label May 13, 2024
@colinmurphy01 colinmurphy01 added the Iteration Minor improvement based on feedback label May 13, 2024
@loganmcdonald-noaa
Copy link
Member

loganmcdonald-noaa commented May 22, 2024

From the docs:

In Drupal 7, users are not allowed to view any unpublished content by default, not even content created by themselves. By enabling 'View own unpublished content', you grant users access to their own unpublished content.

The only way to allow users access to all unpublished content in Drupal 7 (without using a contributed module), is to enable the permission 'Bypass content access control'.
Use this permission with extreme caution as it has far more consequences than just allowing access to unpublished content. In combination with Organic Groups for example, this permission allows access to private group content regardless of whether the user is a group member.

View Unpublished Content with Views Module
The Views module allows access to view data from unpublished nodes. It has a separate filter for published / unpublished status to block access if wanted.

Right now content editors and admins have the permission to view their own unpublished content so it is confusing that is not showing up but we will need to think about if we want to enable a module for permissions to view all unpublished content (in the case they'd have permission to view that content generally). I do not want to turn on bypassing action control.

@loganmcdonald-noaa loganmcdonald-noaa removed their assignment May 22, 2024
@loganmcdonald-noaa
Copy link
Member

Confirmed that users can see content that is unpublished if they authored it, but as of now they cannot view unpublished content they have not authored. Unassigning myself as I think @eric-gade will handle this in his work on the unpublish/archive state! Correct me if I'm wrong and something else needs to be changed here.

@eric-gade
Copy link
Collaborator

From what I can tell, once we enable the Content Moderation module we will have fine-grained control over the permissions that will cover this case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Eng Iteration Minor improvement based on feedback
Projects
Development

No branches or pull requests

4 participants