Drupal Security Module Package
Swipht technologies with support from Portland State University developed a suite of security modules for Drupal 6. The modules provide roles and user specific security permissions for menus, menu items, nodes, and security integration into the administration and help systems. We would like to provide this suite of modules back to the community to share the usefulness of the suite and involve the community to provide additional support, testing, and moderation.
Special care was taken to ensure the usability of permission management was consistent across all sections of the system (nodes, menus, menu items). Also each security module uses a cascading security scheme to allow global security and the option to override or define exceptions to the security model for individual items.
For example, defining global node access rights by role will dynamically apply the security scheme to all content types and nodes created. However the user can override the global security scheme for an individual content type, and override the permissions for a given content type by setting permissions on an individual node.
Modules in the suite:
menu_access
Provides global and menu specific security permissions by role and user account.
- Global security for all menus (default)
- Per menu security
menu_item_access
Provides global and menu item specific security permissions by role and user account.
- Inherits security from the parent menu
- Global security for all menu items (default)
- Per menu item security
http://www.drupal.org/project/menu_access
** Please note menu_access and menu_item_access are included in a single package.
node_access
Provides global and menu item specific security permissions by role and user account.
- Global security for all content types and nodes (default).
- Per content type and all nodes for the content type.
- Per node security scheme
http://www.drupal.org/project/node_access
admin_access
Provides security check integration for all administration index pages and help index pages to only display links to modules, functions, and content based on the user's permissions and access rights. This module relies on the three modules detailed above. Exclusion from items in the administration and help sections are based on security rules defined in the module permissions and can be overriden using rules defined in the navigation menu (main admin menu).
- all admin index pages
- add content index
- help index/details
