User Access & Authentication

The Permission Sets module adds an abstraction layer between the roles that are associated with users and the permissions that are granted by those roles. In the scenario created by permission sets, all permissions and roles are associated with permission sets. Permissions are granted to a role when the two associations intersect.

The primary purpose of this abstraction is to allow us to dynamically alter the roles and the permissions associated with those roles without ever modifying the code that define the permissions.

NOTES:

This module was developed while working on client's site who wanted to keep site freely available for user only for limited time. So basically, anyone who wants to show site content for some limited time and then force users to register - could use this module.

Description

Need to add a list of admin OpenIDs to many websites and not lose sanity while maintaining that list across all servers? This module is for you.

You can still maintain arbitrary list of OpenIDs on each site, but the framework ensures a list of allowed and banned OpenIDs (for the "admin" user), in addition to the local list.

This tool is for Drupal service-providers that maintain many websites and need to give admin access to a number of people, across multiple websites, for maintenance and support purposes.

This module provides single sign-on integration between Drupal and an Atlassian Crowd server. It supports detection of the Crowd SSO cookie to provide automatic login of users already authenticated via Crowd. Drupal accounts are created automatically if the user account doesn't already exist. The module also manipulates the standard Drupal user login form validation handlers to authenticate directly against Crowd instead of Drupal.

The Editor Views module defines a new filter for views - Node access: Edit / Delete.

Add the filter to a view, and you are then able to display nodes only if user has view, edit or delete access.

It also defines a default view which will list all nodes a user can edit / delete.

Development sponsored by Comic Relief.

Overview

The Extended LDAP Groups module is an extension of the LDAP Groups module, which is part of http://drupal.org/project/ldap_integration.

While this isn't really ideal in the long run, it's a good starting point for people who need this functionality right away without having to hack up a contributed module. What I'd really like to see is that this code, or a better version of this code, gets merged into the ldapgroups module. If and when that happens, this module will go away.

UC role progression uses Ubercart's 2.x conditional actions in conjunction with the UC roles module. It answers a need for a purchasable role that enables a user to progress through a series of predefined roles according to a set schedule. A possible use case for this: purchased access to an e-learning course wherein each week the user gains access to a new set of nodes.

Content protector allows an arbitrary directory to be protected by Drupal authentication.

For example, a legacy folder that must live inside the webroot of which its contents cannot be viewed without valid Drupal login credentials or a particular user role.

This module achieves this by writing a .htaccess to the protected folder and redirecting all traffic transparently through Drupal.

This module works with CCK userreference fields and the node_access module to add additional grants to nodes.

To enable userref_access on a node, edit the userreference field for the node type and check the "Use User Reference Access" box.

Any users that are referenced by this field will be given view permissions for the node, all other useres will be denied access to the node.

This module is meant to assist Drupal admins in configuring, debugging, sharing, and submitting support and bug request related to LDAP integration modules. LDAP Help Module should be disabled unless you are debugging or configuring ldap problems. It adds no functionality to the LDAP modules.

There is a lot of frustration configuring LDAP and this module is intended to help people help themselves with modules like ldapauth, ldapgroups, and other ldap modules. It evolved from helping with the support queue in ldap_integration.