Organic Groups Create Permissions

Actually, you *can* create content within a group, even if you don't have general permissions to create that content type. The problem is that the og_create_perms implementation of hook_node_access uses og_get_context_by_url to determine access permissions. This means that it only works *on* the node/add page and not on the main group page (where you'd normally display the links to create content).

I had a more complex use case where I needed to allow different group roles to create different content types, so the above suggestions wouldn't work for me. I added the following to solve the problem:


function _node_access($node, $op, $account) {
$result = NODE_ACCESS_IGNORE;
if (is_string($node)) {
$type = $node;
$group = og_get_group('node', arg(1));
if (!$group) {
return $result;
}
}
else {
$type = $node->type;
}
if ($op == 'create' && in_array($type, og_create_perms_list_bundles())) {
if (!og_user_access($group->gid, 'create ' . $type . ' content', $account)) {
$access = false;
}
else {
$access = true;
}
if ($access) $result = NODE_ACCESS_ALLOW;
}
return $result;
}


This isn't 100% bullet-proof (as it only works on the group home page) but it's a pretty quick workaround that could easily be extended.