By JeffOlson on

On my new Drupal 4.7 site, I have several pages that I am protecting from viewing by anonymous users using the Simple Access module. I have the access on these pages set to authenticated users only.

I am only allowing user accounts to be created by the adminstrator (me). I have two user accounts for my site editors, and then I have created a single shared user account that I am going to allow anyone in a small group of trusted users to use.

I decided to use a shared account because:
1) I don't want the hassle of creating multiple accounts for each of the 30-40 people in this group (it's a Moms group at my church).
2) There is very little value on my site to users having their own account. I don't allow commenting or posting (except by my two editors), so pretty much anything that a user might want an account for, is not applicable on my site.

My question is, is there any way to lock down this shared account? Specifically, I would like to find a way to prevent anyone who uses the account from modifying the password of the account. In Active Directory, for example, the adminstrator can set a "user cannot change password" option, or something to that effect...that's what I'd like to do.

Is this possible in Drupal? Am I going down the wrong path?

⋅ Categories: Drupal 4.7.x

Comments

JeffOlson’s picture

JeffOlson commented

*bump*

rimshot’s picture

rimshot commented

I have pretty much the same requirements and am looking for suggesstions. I'd basically just like to restrict one node to a shared user. One way i thought was to use HTTP-AUTH and have the web server challenge the broswer for certain pages, and just manage the user outside of drupal, which is fine, but can't see a way to do this since HTTP-AUTH is mainly for directory access. On ther option I thought of was to put PHP code around the pages that need to be blocked an then use the PHP HTTP_AUTH to do some checking. Might have to take that route, but would really like to hear of other options. Any suggessions from the drupal wizards out there?

kcouch’s picture

kcouch commented

This would be very helpful functionality.

azoho’s picture

azoho commented

Have you tried the User Protect module? You would need to create a group for the shared user and then could use the user protect module to block editing of email and password.
http://drupal.org/project/userprotect

zwu_ca’s picture

zwu_ca commented

This will be very useful.