This module allows for more granular control over entity permissions by enabling bundle-specific access restrictions. It ensures that you can further limit access beyond existing controls for content entities, without ever expanding available access.
Introduction
This module provides bundle-specific permissions for entities. These permissions can be revoked to further restrict pre-existing access controls for non-internal, bundleable, content entity types. Granting the permissions provided by this module will never result in a wider scope of access than what is normally available without it being installed:
- In cases where a user is lacking a necessary permission provided by this module, this module will produce a forbidden access result.
- In all other cases, a neutral access result is produced to allow pre-existing access checks to take effect.
Installation/Configuration
Upon installation, this module will automatically grant its permissions to the authenticated and anonymous roles to ensure that content access is not unduly interrupted pending initial configuration. You should evaluate each new permission to determine if any should be revoked to establish desired access constraints. After installation, this module follows the principle of least privilege; you will need to manually grant any new permissions generated thereafter.
Configure this module's permissions by clicking "Permissions" after locating the module in Drupal's module installation interface. You can also configure this module's permissions on the bundle-specific "Manage permissions" tab for each applicable entity type which has enrolled into this interface for managing permissions.
Additional permissions may need to be granted aside from those provided by this module (e.g., users will need both "View published content" and "Access Basic page content items" to be able to view content within the "Basic page" content type).