How to prevent users from editing their own profile?

sigol - May 18, 2008 - 11:38

Hi all.

Apologies - I'm sure this has been asked many times but I just can't seem to find the answer I'm looking for.

I'm using Drupal for a school website. It's looking fantastic and the features are incredible. I have some small issues I need to address.

Rather than give parents an individual login (there are lots of reasons why I don't want to do this), we've decided to give them a shared login name of "parent" and a common password.

Therefore the "parent" user account needs to be treated differently from normal accounts:

1. Disable the ability for parents to edit the account. I've done this through menu options no problem but the /user/x/edit page is still available secretly. Would like to remove this ability completely.

2. If the parent can't remember the login, it gives them a password reset option (the email for this goes to the webmaster so it's not the end of the world) but I'd like to switch this off just for the "parent" user.

Does anybody know how I'd go about doing this?

Thanks very much in advance,

Sigol.

» Login or register to post comments

There is a module that gives

MissyM - May 19, 2008 - 03:30

There is a module that gives permissions based on a path. I can't remember the name but you might give that a shot.

Thanks MissyM - will have a

sigol - May 20, 2008 - 09:51

Thanks MissyM - will have a look through the modules.

Will this also disable the password reset option for specific users?

Best wishes,

simon.

can't you just create a role

esllou - May 20, 2008 - 11:18

can't you just create a role for "Parent" and use access control to prevent all of that role from doing X, Y and Z??

hi esllou. that's what I

sigol - May 21, 2008 - 00:40

hi esllou. that's what I thought I could do but I can't see a permission for "edit own profile".

Do you know how to do this?

Thanks,

Sigol.

He's right, it doesn't seem

siliconvalley1 - May 21, 2008 - 01:07

He's right, it doesn't seem to show up under access control, not under user settings either, maybe there's a module for this? Not sure but it might require some editing of the code as it seems this feature was left out.

DITTO!

mr.morton - June 23, 2008 - 11:25

I'm having the exact same problem...

I've been googling - but cant find a solution. It just doesn't make sense
that you can not disable edit profile pr. user or role.

Anyone have a solution for this problem ?

Kind Regards
Mr.Morton

I'm having the same

annalina614 - July 2, 2008 - 20:26

I'm having the same problem.

But I think removing it from the profile page would be enough.
Sigol - How did you remove it from the Menu options? I can't find that option.

Thanks!

confirmed: Path Access module denies user access to own profile

TommyK - March 19, 2009 - 02:28

http://drupal.org/project/path_access

I installed the 6.x-1.x-dev version and it works perfectly. I created a role and blocked the paths:

user
user/*

Now when a user of that role is logged in, the user will see the predicted Access Denied message when trying to get to either the View or Edit areas of a profile, including the user's own.