function workflow_access_workflow in Workflow 7

Same name and namespace in other branches

1. 5.2 workflow_access.module \workflow_access_workflow()
2. 5 workflow_access.module \workflow_access_workflow()
3. 6.2 workflow_access/workflow_access.module \workflow_access_workflow()
4. 6 workflow_access/workflow_access.module \workflow_access_workflow()
5. 7.2 workflow_access/workflow_access.workflow.inc \workflow_access_workflow()

Implements hook_workflow().

Update grants when a node changes workflow state. This is already called when node_save is called.

File

workflow_access/workflow_access.workflow.inc, line 13

Provides node access permissions based on workflow states.

Code

function workflow_access_workflow($op, $old_sid, $sid, $node) {

  // ALERT:
  // This is a tricky spot when called on node_insert as part of the transition from create to state1.
  // node_save invokes this function as a hook before calling node_access_acquire_grants.
  // But when it calls node_access_acquire_grants later, it does so without deleting the access
  // set when calling workflow_node_insert because it is an insert and no prior grants are expected.
  // This leads to a SQL error of duplicate grants which causes a rollback of all changes.
  // Unfortunately, setting access rights isn't the only thing we're doing on node_insert so we
  // can't skip the whole thing. So we need to fix it further downstream in order to get this to work.
  // Here we don't want to run this in the case of (and ONLY in the case of) a brand new node.
  // Node access grants will be run as part of node_save's own granting after this.
  //
  // NOTE: Any module that sets node access rights on insert will hit this situation.
  //
  switch ($op) {
    case 'transition post':
      if ($old_state = WorkflowState::load($old_sid)) {
        if ($old_sid != $sid && (empty($node->is_new) || !$node->is_new)) {
          node_access_acquire_grants($node);
        }
      }
      break;
  }
}