By brownsky on
Hi,
I'm trying to disable the option of "block configuration" in the "my account" -> "edit" page. I've created 4 blocks of my own and I need that the users that don't have authenticated_user role, can not access this blocks.
I've noticed that a user with "doctor" role (a role created by myself), can enable his account to view the blocks he wants. And another thing, instead of not having the block enabled, he can access my personal pages if he knows the URL....
Please, help me with this security issues,
Thanks in advance
Comments
Did you ever figure out how
Did you ever figure out how to disable the option of "Block configuration" in the My Account->Edit page?
---------------------------------------------------------------
My drupal site: Vacation-Places