Drupal Module 4.5.0 — Access-Restricted Content Excluded, Attached Documents Crawled Again
Opensolr Search for Drupal 4.5.0 is released. The headline fix: content that an anonymous visitor cannot view is no longer indexed. A second fix restores crawling of attached documents, which had been silently skipped.
01 Access-restricted content is no longer indexed
The module previously asked only one question before indexing an item: is it published? In Drupal a published node can still be hidden from the public by access grants — Group, Content Access, Domain Access and similar modules all do this. Everything indexed is served to anonymous visitors on the search page, so a published-but-restricted node could surface to people who were never meant to see it.
Each item is now checked on behalf of the anonymous user before it is indexed, and the check fails closed: if access cannot be determined, the item is left out. Private files were already excluded correctly and are unaffected.
02 Attached documents are crawled again
The include attached files setting was saved under one name and read under another. The crawler was therefore permanently told to skip attached documents, and the Web and Documents tabs never appeared. Both the setting and the tabs now work as intended.
03 Other fixes in this release
- Embedded widget honours the query. The widget ignored the search query, which made the Initial Query setting do nothing.
- Facet Mapping saves are safe during a Solr outage. Saving the Facet Mapping tab while Solr was unreachable could wipe your entire facet configuration.
- Facet ordering sticks. A newly enabled facet dragged to the top jumped back to the bottom.
- No error for anonymous visitors. The search page could return an error when the elevation rules table was unavailable.
- No false ownership warning. A stale cached index list could tell visitors the index does not belong to your account.
- Outages are visible. A Solr outage now appears in the log instead of silently looking like an empty index.
- No sideways scroll. The results page no longer scrolls horizontally on phones.
Update via Composer or the Drupal.org release page.