access control

I'm straggling with a conflict for controlling permission access on node base and on field base.

First of all, excuse my English. I hope you can understand what I want to ask.

For a long time I have used this NginX config as a template for mine own, but I am very unsatisfied with it's security concerning PHP files. I mean, there are only some PHP files which a really needed for Drupal to work: index.php, update.php and cron.php (install.php used only once and I don't use any features of xmlrpc.php). So I want to rewrite my NginX config to grant access only for enlisted PHP files.

Hey all,

My name is Courtney and I work as the Web Interface Designer at Johnson County Library in Kansas. We have begun our Drupal journey and are in the process of redesigning our Teen section in Drupal.

First, what sort of access control have you set up at your library? How does that work for you? Any shortcomings/pitfalls? Any awesome-sauce access control awesomeness?

Second, I've narrowed down options to two possible modules: Workbench suite or Organic groups.

For sometime we have been working on a publication workflow system at the California Science Center in D6 and I've been considering how such a system might be implemented in D7. This lead me to the work being done on the Relation module, which lead me to the following conceptual model. I'd like some feedback on the appropriateness and feasibility of this approach.

We have made a set of module for extend the access control in Workflow module.

workflow user reference access
Allow admin assign node permission to the users of any CCK User Reference field in the node.

workflow role reference access
Allow admin assign node permission to the users belong to roles which selected in CCK Role Referencefield.

Workflow transaction access
Add one more layer of filter based on user reference field to status control form.

I hope someone has run into something like this before... I'm using a group who's form duplicates nodes and automatically associates them to the new group. So you create a group, select a book in the system and it will grab the book, duplicate it and set the og node settings to the new group. Then it performs a node_save after removing the nid so it's a "new node" with the old content / hierarchy.

Hi,

I am considering all my media content to webair CDN
http://www.webair.com/pdf/WebairCDN_SecureURLs.pdf

Will I be able to maintain access control to media for members/non-members with http://drupal.org/project/cdn and is there anyone out there that can set this up for me ?

Regards Allan

We are building our new intranet on Drupal. We are a group of companies, i.e. our organizational structure consists of sub-companies, which again have sub-companies or departments, which also can have sub-departments and/or employees belonging to them. We need to have this organizational structure in our Drupal-based intranet system, both:
1) in terms of content: displaying the corporate structure as a hierarchical list of companies, sub-companies, departments; displaying employee listings per company and department;

Hello everyone,

I'm a complete newbie to writing Drupal apps and having not yet found anything which fits my needs properly, I'm setting out on writing a node access module which uses the site's primary navigation menu structure to define access permissions.

I'm still at a very early stage of planning, and the use case for the module is pretty specific, so I haven't even begun to consider all the "what-if"s associated with, say, what happens when the site admin decides to reassign the primary menu.

I am using the content profile module. After creating a content type, Bio, and designating it to be used as a user profile, users get an access denied message when attempting to view any profile other than their own. I created several Bio nodes for several users. According to the content profile release notes, those nodes are accessed through mysite/user/userid/profile/bio. Those nodes are only visible to their creators or the administrator. All others get the access denied message. I have given all users permission to access content.