Can PM & CCK work together? What provides security?

The PM is a content type, so every PM that gets sent is a node on your Drupal site. As for security, I'm using Drupal's own hook_access() so that only the PM author and specified recipient(s) are able to view the node. Drupal's hook_db_rewrite_sql() also lets me hide PM nodes from any sort of node lists that you'd normally find on a Drupal site, though that will need some wider testing in the wild to make sure it's good enough.

So, you can easily use this to transmit documents by either using the normal file attachments granted to content types by the upload module or by adding a CCK field to the content type.

I'll probably need till the end of next week for me to consider this feature complete. I didn't get a chance to commit last night my work on breadcrumbs and an unread notifier and such. I'll be heading out of town this weekend for a camping trip w/ guys from my church, and I'll probably come home soggy (looks like rain) and in need of some sleep. ^_^

Interesting thought... I actually hadn't considered the necessity of multiple content types. Given the current architecture, that isn't possible. For the purposes of this module, I want to keep the code light and probably won't implement that (unless there's a very easy way to do this... I know we've got something similar with product classes in Ubercart).

I'd consider whether it's a necessity first. You might get away with just adding the file field or attachment to the PM node and either: 1) display a message to users about how to send files to other users or 2) write a wrapper module that will alter the PM node form if a user chooses to send a file from a particular link.

Also, thanks for the link. Hadn't heard about ICCM before. We did have a fun time traipsing through the woods, and we got to hear from two of our pastors about encouragement in community and confrontation in community that serves the purpose of promoting or protecting holiness. It was a great time. : )

And it's nice to meet so many Christians through Drupal, too.

chx pointed out in the other issue here that my hook_db_rewrite_sql() might prevent this module from working with Views. That would be unfortunate... I'll have to chat w/ merlin to see about fixing that.

Re: an API, I'm not entirely sure why that would be necessary. I won't rule it out, but part of the benefit of making PMs nodes is that there's already a fully developed API for handling nodes. If you wanted to automate the sending of a PM, you can simply fill out a node object and use node_save() to do the job.

I'm sure I'm missing something, though, so feel free to ping back if you had thoughts on what that might entail. : )