This project is not covered by Drupal’s security advisory policy.

The module provides two views access plugin restricting the access of a Views display to the users referenced in the page path or to users having special properties:
* "Current user or Permission" granting access to users with a given permission if the page path does not referenced them.
* "Current user or role(s)" granting access to users with one of the given roles if the page path does not referenced them.

The module offers also to developers two services implementing the same access check mechanisms on page paths as the two plugins, so that they can use in their modules.

It is different from modules like "Node access user reference", "Personal Access Restriction" or "Access by Reference", as it does not control access to entity but user-targeted pages built with Views.

It is also different from the "Views Private Access" module as this one bases the access restriction on the Views argument validator "User" and does not offer an alternative mechanism based on roles.

The typical use cases covered by the module are personal dashboards that must be visible and accessed by the concerned user only or members of the site's support team or administrators.

Project information

Releases