Personal Access Restriction
209 sites
Security covered
This module allows administrators to restrict access to specific content or taxonomy terms for individual users or user roles. It also provides options for how to handle denied access, such as returning an "Access denied" message or a "Page not found" error.
🇺🇦
This module is maintained by Ukrainian developers.Please consider supporting Ukraine in a fight for their freedom and safety of Europe.
Introduction
Personal Access Restriction module provides the ability to restrict access to a particular Node or Taxonomy Term by UID or User role.
Also, it provides the ability to select the type of response ("Access denied" or "Page not found").
To submit bug reports and feature suggestions, or track changes: https://www.drupal.org/project/issues/par
Getting Started
- Install Personal Access Restriction module (
composer require drupal/par) - Enable Personal Access Restriction module (
drush en par) - Set permissions for 'Configure all Personal Access Restrictions', 'Manage Personal Access Restriction' and 'View restricted pages' at /admin/people/permissions
- Add your access restrictions for any Node or Taxonomy term on their add/edit pages (you will see the 'Personal Access Restriction' collapsed container).
- Fill the User ID field to restrict access to an entity for particular users. You can set multiple UIDs separated by whitespace.
- Fill the Roles field in case if you want to restrict access to an entity for all users with some role.
- In the "How to show the page?" field you can set the access restriction type for this entity. Also, there is a default variant that you can use in case if you want just to select users or roles for further access restriction but do not want to restrict access right now.
- You can see a list of all restrictions at /admin/config/par. On this page you can filter access restrictions by Entity type, Entity ID, UID, User role and action.
- If you want to provide the ability to see restricted entities, you can add 'View restricted pages' permission to some User role at /admin/people/permissions#module-par. Users with the 'Administrator' role will see pages with restricted access in any case.
Requirements
No special requirements.
Installation
- Install as you would normally install a contributed Drupal module.
See: https://www.drupal.org/node/895232 for further information. - If you are using Composer you can install this module by the command:
composer require drupal/par
Configuration
- Configure the user permissions in Administration » People » Permissions:
- Configure all Personal Access Restrictions (Personal Access Restriction)
- Manage Personal Access Restriction (Personal Access Restriction)
- View restricted pages (Personal Access Restriction)
The top-level administration categories require this permission to be accessible.
Maintainers
- Roman (rsych) - https://www.drupal.org/u/rsych