I think the philosophy of: "Don't trust the admins" really succinctly explains almost all features of the module.

In terms of purposes:

  • Block super destructive features present in Drupal core/contrib (like the ability to execute PHP)
  • Maybe outright prevent installation of some dangerous modules (anything that relies on bad judgement is a good tip off
  • Track (log) actions which might be useful for a forensic review of what happened on a site

Anything else?

Comments

coltrane’s picture

coltrane
he/him
commented

"Don't trust the admin" -> Don't trust the admin(s) ?

Security Review has a mechanism for defining "trusted" roles. Is it worth defining admin roles and extending the meaning here?

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Issue summary: View changes

s

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Issue summary: View changes
Status: Active » Fixed

After 2+ years with no feedback I guess this is agreed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.