This site is archived.

Using Node Access

agentrickard's picture
Submitted by agentrickard on Thu, 07/17/2008 - 18:18.

Session recording

Attached files

Co-presenters: 
Placement
Session time: 
08/29/2008 - 15:00 - 08/29/2008 - 15:45
Conference booklet summary and bio
Article for conference booklet: 
Node Access is Drupal's system to determine who can view, edit and delete content on your web site. The authors of Organic Groups and Domain Access will give attendees a guided tour of Drupal's Node Access system, its design patterns, its strengths and its limitations. The session will prepare you to implement your own access control module and prepare us to discuss improvements to the core Node Access system.
Bios for conference booklet: 
Ken Rickard is a senior Drupal programmer at design and development firm Palantir.net. Ken is the author and maintainer of the MySite, Domain Access and Skeleton modules. He is a two-time Drupal mentor for Google's Summer of Code and was a track co-chair for DrupalCON Boston and DrupalCON Szeged. Moshe Weitzman has been a consistent contributor to Drupal core and contrib since November 2001 (i.e. before drupal.org was born). As such, he has pretty much touched the whole core code. He is also a member of the Security team and a Permanent Member of the Drupal Association.

Overview

This session, run by the authors of Organic Groups and Domain Access, will give an introduction to the workings of Drupal's node access system.

Agenda

* What is Node Access?
* How does it work?
* What modules provide node access?
* Exploring the current API
** Enabling node access
** Defining access realms
** Defining access grants
** hook_node_access_records()
** hook_node_grants()
** db_rewrite_sql()
** Changes from D5 to D6
* Common problems and issues
* Best practices for using node access

Goals

New users should come away with an understanding of the features and limitations of the node access system. Programmers should come away with the ability to write a node access module, using the existing API. Everyone should come away thinking about how to make the system better.

Resources

See the node acccess example module for background.

webchick's picture

Looks like the wrong video was uploaded here...

The video's correctly labeled Drupalcon 2008 Szeged: Using node access, but is actually jQuery in Drupal, part 2.