Disables the user interface for creating and assigning roles and permissions so all permissions management can be done with code.
This adds an extra layer of security, as the site's permission can no longer be misconfigured accidentally.
This module was inspired the security paradigm of the Plone platform. See, in particular, 'Problem A2: Broken Access Control' in the Plone documentation.
Notes
This module was written in Drupal 7. The Drupal 6 version requires the Permissions API module, which contains functions native to Drupal 7.
This module rebuilds permissions each time a module is enabled or disabled. If you are using this module as part of an install profile, you should enable it the final step of the install vs. including is as a dependency. Including it as a dependency will dramatically increase the time it takes to install your profile.
Supporting organizations:
Ongoing feature additions and maintenance
Help maintain.
Project information
- Project categories: Security
86 sites report using this module- Created by agentrickard on , updated
Stable releases for this project are covered by the security advisory policy.
There are currently no supported stable releases.
