Security

Proper backend for Hosting Profile Roles.

This module abstracts authorization consumers, such as Drupal Roles, Organic Groups, Workbench Access Sections, and providers, such as LDAP, into pluggable consumer and provider classes. Originally the initial classes came out of the LDAP project, but they are needed for some other authorization models and were already designed to be decoupled from the LDAP groups providing the authorization.

This module is a requirement for the 8.x-3.0 branch of LDAP authorization and contains the ldap_authorization_drupal_roles module renamed as authorization_drupal_roles.

Resolves the Views vulnerability outlined at http://drupal.org/node/1069326 by revoking access to admin/views/ajax/autocomplete/user for users that do not have permissions to see user profiles.

Uses the HappyCaptcha web service to improve the CAPTCHA system.

HappyCaptcha is a free CAPTCHA service which developed on Hint-Challenge-Response approach*. We are focused on enhancing the user experience on your website.

Captcha services today are making life difficult for the user. Instead of asking the user to input difficult and boring text, HappyCaptcha offers a cute and friendly user experience.

Message Securely allows you to create a message and send it to an individual. The message can be quickly retrieved via an internet browser.

Summary

Provides cross-site scripting security for site admins. If the site is hacked using XSS, this reduces the risk of anything harmful being done by adding an IP-based captcha to dangerous forms. Furthermore, it tries to detect XSS attempts and notify the admin of it.

Detailed description

Gives content access permissions on a book child page if users have access to the root of the book, typically provided by another node access module. Checks view, update, and delete grant operations, and can pass those on to the referencing content, or trigger a different grant configuration according to settings(not yet).

This module is a spin-off from Node access node reference and it's functionality is very new - use with caution!

Enables Craigslist-style "anonymization" of email addresses on node comments. An anonymous user can post their comment, enter their name and email, and choose to expose a "fake" email address that will route to their real email address.

Notes

This module doesn't work out of the box. Some mail server configuration is required. Details may be found in the README file.

For authenticated users, presents a disclaimer that must be acknowledged before the user can access site content.

This module is sponsored by ICF International. It was originally created for a U.S. Government agency website, in accordance with security requirements that specify that authenticated users must acknowledge an agency disclaimer.

I'm only starting a module to provide the option to configure privacy settings for fields that have relation with an user.