module
Maintenance status: Actively maintained
Development status: Maintenance fixes only
Downloads: 2571
created - / changed -

Small module that provides permissions to edit the menu link on node edit forms, while not having permissions to administer whole menus.

module
Categories: (нет)
Maintenance status: Minimally maintained
Development status: No further development
Downloads: 0
created - / changed -

This is a raw one-time feature export.

module
Categories: (нет)
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

A taxonomy term reference field by default links to /taxonomy/term/<Term ID>, an overview of all nodes linked to this term.

module
Categories: Search
Maintenance status: Unsupported
Development status: Obsolete
Downloads: 625
created - / changed -

This module is now merged with apachesolr_user. Please use that one
http://drupal.org/project/apachesolr_user

module
Maintenance status: Minimally maintained
Development status: Maintenance fixes only
Downloads: 0
created - / changed -

Provide a CCK field type that lets you choose two drop down fields like year & month.
Display output of this field shows no of years and months.

module
Categories: Utility
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

Define Custom Variables to call directly in input formats as a Tokens

module
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 169914
created - / changed -

The YouTube field module provides a simple field that allows you to add a youtube video to a content type, user, or any other Drupal entity.

Display types include:

module
Categories: Content Display
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

Sandbox Project for testing Of Drush

module
Categories: RDF
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

Allows you to monitor your site: makes passive website states available to the rules module as events, every day or so.

module
Categories: Views
Maintenance status: Seeking co-maintainer(s)
Development status: Maintenance fixes only
Downloads: 1741
created - / changed -

This module adds a custom date format to Views, to allow two different date formats to be applied to a single instance of a field, based

module
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

A filter for adding help tips to words existing in a taxonomy vocabulary with the term description, using the HTML title attribute or the

module
Categories: (нет)
Maintenance status: Seeking co-maintainer(s)
Development status: Under active development
Downloads: 446
created - / changed -

Motivation

Drupal has two extremely powerful permissions:

  • Administer permissions allows assigning all permissions to any role, even to the anonymous user role! Specifically, a user with this permissions can obtain any other permission for himself.
  • Administer users allows editing any user, including his own and even user 1. This includes
    • assigning/removing any roles (and thus any permissions),
    • changing the user's name (to cover his tracks),
    • changing the user's password (to downright hijack an account), or
    • changing the email address (to obtain a log-in link to gain access to the other user's powers without his knowledge).
    • It also allows deleting any user, including user 1, which can seriously disrupt the site's operation.

This means that either of these permissions allows obtaining complete control over your site, and you as site administrator or consultant may be reluctant to give a role with either of these permissions to someone else, because

  • you may not trust their Drupal competence,
  • you may not trust their integrity, and/or
  • you may not trust their ability to keep their account safe from others.

However, as long as you withhold these permissions, you will never have an assistant or successor who can learn how to do your job. It becomes obvious that we need safe versions of these permissions that we can grant to others without putting the entire site at stake, in order to get help managing normal users and to introduce our assistants to using the permissions page by giving them a safe subset.

This module provides an install-it-and-forget-it solution that is in many ways superior to solutions that require you to define and continually audit (think about that!) and maintain explicitly who can do what.

No Endorsement

The Drupal Security Team does not provide endorsements for contrib modules. Their stand is that it's the site administrator's job to safe-guard the Administer permissions and Administer users permissions, and that a site where either of these permissions is compromised is a broken site.

As with all contrib modules, especially those that relate to security, you can rely on the community for testing and feedback, but ultimately, you yourself are responsible for determining whether it meets your requirements.

How It Works

The Protect Permissions (PP) module automatically protects all the security-relevant permissions using the following rules:

  1. PP sanitizes the Administer users permission for users who have Administer users but not Administer permissions ("deputy admins"). Users without the former pose no risk, and users with the latter are all-powerful anyway.
  2. PP considers only permissions that are marked as having security implications, in core or contrib.
  3. Deputy admins cannot assign or remove roles that carry security-relevant permissions, which they don't hold themselves.
  4. In addition, deputy admins cannot edit user names, email addresses, nor passwords of accounts that hold security-relevant permissions, which they don't have themselves, nor can they cancel/block/unblock any such accounts (directly or through bulk operations). This ensures that deputy admins (or someone who stole such an account) cannot obtain additional permissions or disrupt the operation of a site through hacking.

That's the basic PP functionality. It automatically takes the security and manageability of your site to a new level simply by installing PP. The following items provide additional related goodies:

  1. The new Administer user settings permission governs access to the admin/config/people/accounts pages. Access to these pages is not required for daily operation.

    One setting on the admin/config/people/accounts/settings page, the Administrator role selection, carries a much higher security risk than all the others. We think this selection should be restricted to the Administer permissions permission, and we consider this to be a bug in D7. The Fix Core module for D7 has a fix for this.

  2. The optional new Administer safe permissions permission allows you to grant selected deputy admins access to a sanitized permissions page (with all permissions grayed out that have security implications), so that they can add or remove non-security-relevant permissions to/from any role and learn how use that page.
  3. The optional new Administer own permissions permission works like the Administer safe permissions, but it makes a different subset of permissions available: those that the user himself holds, including the (restricted) Administer users permission, but excluding the two new Administer xyz permissions permissions.
  4. Either of the last two permissions allows creating and deleting roles, as long as these roles do not carry inaccessible permissions. They can be granted separately or together.
  5. The PP module protects itself against being disabled by anyone but user 1 and users holding the core administrator role.

Installation

  1. Copy the entire protect_permissions directory, containing the protect_permissions.module and other files, to your Drupal contrib modules directory. Do the same for the required Chain Menu Access API module.
  2. Log in as site administrator.
  3. Go to the module administration page and enable the module.

Configuration

There is no configuration necessary. If you want, you can assign the new sanitized

  • Administer user settings,
  • Administer safe permissions, and
  • Administer own permissions

permissions.

Development progress

This module is in initial development. You are invited to comment on the design outlined above in the issues queue.

module
Categories: (нет)
Maintenance status: Seeking co-maintainer(s)
Development status: Under active development
Downloads: 0
created - / changed -

CloudFront Invalidate provides a wrapper around the AWS SDK library to allow modules to easily invalidate paths. Steps to use:

module
Categories: Search
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 2648
created - / changed -

This module provides basic indexing of the commerce entities for the multi entity branch of the Apache Solr Search Integration Module

module
Categories: (нет)
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

This module adds simple functions to make Drupal messages look and act better.

module
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

This module has been moved to Daylife

Let's meet there

module
Maintenance status: Seeking new maintainer
Development status: Under active development
Downloads: 0
created - / changed -

The text_summary() function used for displaying text fields with the

module
Categories: (нет)
Maintenance status: Actively maintained
Development status: Under active development
Downloads: 0
created - / changed -

A Drupal 7 Fusion subtheme implementing http://cssgrid.net/ to create responsive fusion

module
Maintenance status: Actively maintained
Development status: Maintenance fixes only
Downloads: 13880
created - / changed -

Small module that allows users to view menu links to unpublished nodes.

module
Categories: Multilingual
Maintenance status: Minimally maintained
Development status: Under active development
Downloads: 0
created - / changed -

This is a first try of integrating some language/translation related workflow with the Workbench suite.