Guardian
This module prevents users from logging in with a username and password directly. Instead, guarded users can only log in via a one-time login link generated by Drush or by using the password reset functionality. This helps secure accounts by avoiding the need to share or store passwords.
Guardian protects specified Users a.k.a. 'guarded users' from logging in with a username and password and changes to the login data (username or password).
To login with a guarded user, login is possible with drush uli [uid] or a password reset url.
In this way there will be no need to store and share complex passwords within your organization.
Installation
Developers
To install the module, make sure that the user 1 account has the correct mail address and that the mail address is the same as the init column in your user database table.
System Administrators
System administrators need to assign a shared inbox or group mail address for development teams to receive the password reset mail. If a person is leaving the project, only access to the webserver and the shared inbox needs to be denied to secure the website for user 1 access.
Usage
- Use drush to request a one time login url:
drush uli [uid] - Access the password reset form:
/user/password
Depends on
Dependencies of the latest stable release
No dependencies recorded for this project.
Required by
Tracked projects that depend on this one
No tracked projects depend on this one yet.