Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.
By Dan DG on
I have a simple site, none of which can be edited by the public. There is a section of the site that cannot be viewed by guest users - only by media contacts who have a login. This section is also 'read only' to authenticated users.
I would like to have just the one username and password that I can give out to any media contacts, but this is hindered by the fact that once they log in, they can change the password/username and also the email address associated with the account, as well as having access to the account's 'contact settings.'
Is there an easy way to prevent this?
I thought I could simply remove 'My Account' from the menu, but it appears it is locked. Thanks in advance to anyone who can help!
Comments
=-=
I don't have the time to test this theory at moment but. ......
can't one use permissions to control this in administer -> access control
scroll down to user module
to select what role has permissions to view the profiles ?
Of course I could be off base here.... as I've never tried what you are trying to have tested this.
_____________________________________________________________________
Confucius says:
"Those who seek drupal answers should use drupal search!" : )
Thanks for the quick
Thanks for the quick response!
I had it set with all permissions in that section removed, but the problem was that an authenticated user can still change their own password etc.
I have one user (apart from myself!) set up - so I can give out the username and password to a number of different people and they can use it to gain access to the 'hidden' content. Unfortunately, if one of them was so inclined, they could change the password for this user account, rendering it inoperable for everyone else until I reset it.
=-=
security through obscurity?
what if you were to create a new navigation block only shown to this group that did not include the my account menu item ?
_____________________________________________________________________
Confucius says:
"Those who seek drupal answers should use drupal search!" : )
Thank you! That's exactly
Thank you! That's exactly what I need!
I shall create a custom Navigation block without the My Account link, and hide the standard Navigation block from authenticated users.
Drupal forums come through again...!
Why don't you create a
Why don't you create a different account for each person? I can't imagine any reason why you would need to make users share a single account.
The reason is...
Users are not able to create their own accounts, but I don't want to have to create a new account each time I meet a new contact who I want to have access to the 'hidden' content. My work involves a lot of networking outside of the office - ie in bars, at concerts, etc. :-)
The list of people I want to have access is constantly growing, so I don't want to have to keep manually adding users.
I'd prefer to have a single username/password combination (that I can easily remember!) that I can give to people and will allow them instant access.
(no title)
One idea is to try the path access module (http://drupal.org/project/path_access) and forbid authenticated users to visit the path /user/2/edit (if that user id is 2).
I haven't tested it of course.