author_only=“yes” shows edit form, but wont allow save, error “safecracker_author_only”

Question

I have a strange issue I can't find reference to anywhere on Google!

The following code allows me to display a Safecracker form to edit an entry. When I click save I get the error below.

{exp:safecracker
    channel="member_news"
    return="members/profile#tab3"
    author_only="yes"
    form_class="uniform"
    error_handling="inline"
    entry_id="{segment_4}"
}

    <p>
        <label for="title">Title</label>
        <input name="title" type="text" value="{title}">
    <p>

    <p>
        <label for="title">Summary</label>
        {field:member_news_summary}
    <p>

    <p>
        <label for="title">Content</label>
        {field:member_news_content}
    <p>

    <input type="submit" value="Submit">

{/exp:safecracker}

This is the error:

The form you submitted contained the following errors

safecracker_author_only

I find this strange because I am the author of the entry, it wont even show the edit form to other entries I am not the author of, so author_only="yes" seems to be working with that respect. But clicking save its as if it then thinks I am not the author.

Removing author_only="yes" will allow me to edit AND save, any form, which is obviously bad.

So I am not sure what the issue is. Using v 2.6.1

Answer 1

Your code looks right. Trust me, author_only does work. First rule out the obvious: In your safecracker form, output {author_id} and {member_id} and make sure they match. Second, suggest checking member group settings that you can edit entry

Answer 2

Ok, I've been able to replicate the same issue in my setup up and solved it with a plugin as follows:

{exp:yak_bus:grant_access url_title = "{segment_3}"}{if response == "no"}{redirect="access/not_authorised"}{/if}{/exp:yak_bus:grant_access}

public function grant_access ()
{
    $url_title = (ee()->TMPL->fetch_param('url_title') != '') ? ee()->db->escape_str(ee()->TMPL->fetch_param('url_title')) : FALSE;

    if ( ! $url_title) return;

    $query = ee()->db->query("SELECT url_title, author_id 
        FROM exp_channel_titles 
        WHERE url_title = '" .$url_title . "'");

    if ($query->num_rows == 0 )
    {
        // not a valid url - so could be another page within mybusiness, thats ok
        return;
    }

    if ($query->row('author_id') != ee()->session->userdata('member_id'))
    {
        $vars = array('response' => 'no');
        return $this->return_data = ee()->TMPL->parse_variables_row(ee()->TMPL->tagdata, $vars);
    }

    return;
}

And if you need a start with a plugin pkg,io