Thanks for all the tips, I'll try disabling modules although I can't find the reason why this would happen.
I can't assign the nodes to a different user because these nodes are used as content profiles, and there can be only 1 per user. Some nodes will have users attached to them but others won't at first. As for the permission, the anon user doesn't have any content permissions other than access content. And the node type is a simple cck node type. Idan From: [email protected] [mailto:[email protected]] On Behalf Of Randy Fay Sent: Wednesday, July 21, 2010 3:52 PM To: [email protected] Subject: Re: [development] with anonymous user able to edit nodes I know you checked perms, but this definitely sounds like 'edit own <content>' permission. Normally there wouldn't be any consequence of an anon user having that, but since you have anon nodes, if anon had that priv, they'd be able to edit. Also note that a cheap path forward is to use VBO or just the database to change all your anon nodes to an appropriate user, which is probably a good idea anyway. -Randy On Wed, Jul 21, 2010 at 5:13 AM, Idan Arbel <[email protected]> wrote: Hello, I have strange critical issue with anonymous user being able to edit nodes. I have nodes created by anonymouse users (created using node import) and any anonymous user can edit them. in the permissions anonymous user don't have permissions to edit anything. Idan -- Randy Fay Drupal Module and Site Development [email protected] +1 970.462.7450
