Is there any way to restrict what my users can edit in their accounts? For example, I added a tab called "Personal Information" for the users with some custom fields. Is there a way to give them access to edit anything in their "Personal Information" tab and NOT edit the stuff under the "Account settings" tab?

Comments

rimian’s picture

I happened to be reading on this on the train this morning in the Pro Drupal Development book.

have a look at:
hook_access()
hook_perm()
hook_node_grants()

I'm sure you could use hook_node_api or some other api and check perms on certain operations of your node or user.

http://www.rimian.com.au

prfctgdess’s picture

Thanks, I'll take a look there.