The Taxonomy Access Control module allows users to specify how each category can be used by various roles.
Permissions can be set differently for each user role. Be aware that setting Taxonomy Access permissions works only within one user role.
(For users with multiple user roles, see section Good to know below.)
On the category permissions page for each role, administrators can configure five types of permission for each term: View, Update, Delete, Add Tag (formerly Create), and View Tag: (formerly List
| View | Grants this role the ability to view nodes with the term. (Users must also have this permission to see nodes with the term listed in Views.) The role must have access content permission on the permissions administration form. |
|---|---|
| Update, Delete | Grants this role the ability to edit or delete nodes with the term, respectively. The role must not have edit any [type] content or delete any [type] content permission on the permissions administration form if you wish to control them here. |
| Add Tag | Grants this role the ability to add the term to a node when creating or updating it. (Formerly Create). This does not give the role the ability to create nodes by itself; the role must have create [type] content permission on the permissions administration form in order to create new nodes. |
| View Tag | (Formerly List.) Whether this role can see the term listed on node pages and in lists, and whether the user can view the taxonomy/term/x page for the term. This does not control whether the role can see the nodes listed in Views, only the term. |
View, Update, and Delete control the node access system. View Tag and Add Tag control the terms themselves. (Note: In previous versions of Taxonomy Access Control, there was no View Tag permission its functionality was controlled by the View permission.)
View, Update, and Delete have three options for each term: Allow (A), Ignore (I), and Deny (D). Indicate which rights each role should have for each term. If a node is tagged with multiple terms:
Add Tag and View Tag have only two options for each term: Yes (selected) or No (deselected). Indicate what each role should be allowed to do with each term.
The Deny directives are processed after the Allow directives. (Deny overrides Allow.) So, if a multicategory node is in Categories "A" and "B" and a user has Allow permissions for View in Category "A" and Deny permissions for View in Category "B", then the user will NOT be permitted to View the node.
Access is denied by default. So, if a multicategory node is in Categories "C" and "D" and a user has Ignore permissions for View in both Category "C" and "D", then the user will not be permitted to view the node.
(If you are familiar with Apache mod_access, this permission system works similar to directive: ORDER ALLOW, DENY)
This option, just underneath the vocabulary title, sets the permission that will automatically be given to the role, for any new terms that are added within the vocabulary. This includes terms that are added via free tagging.
Users with multiple user roles: Allow/Ignore/Deny options are interpreted only within one user role. When a user belongs to multiple user roles, then the user gets access if any of his/her user roles have the access granted.
In this case, permissions for the given user are calculated so that the permissions of ALL of his user roles are "OR-ed" together, which means that Allow in one role will take precedence over Deny in the other. This is different from how node access permissions (for multi-category nodes) are handled within one user role, as noted above.
Input formats: Node editing/deleting is blocked, even when the user has Update or Delete permission to the node, when the user is not allowed to use a filter format that the node was saved at.
Phone : +84-(0)24-37683191
+84-(0)912439787
Fax : +84-(0)24-37683058
Email : cuchhvn@vinamarine.gov.vn
