5 User Mgmt in Drupal


Published on

  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

5 User Mgmt in Drupal

  1. 1. User management<br />Wilson Wingston Sharon<br />wingston.sharon@gmail.com<br />
  2. 2. Drupal relies very heavily on the user system to manage permissions.<br />Default user roles available<br />Anonymous <br />Authenticated<br />Creation of customized access rules allows you to share the burden of running a site without giving everyone access to everything.<br />Every user has his page at users/<username><br />intro<br />
  3. 3. User management to control how new users register.<br />Control permissions and roles for each user.<br />Learing access control.<br />Who’s using my site??<br />
  4. 4. Access rules - from this section you can define different access rules for your Drupal; you can disallow users, emails and IP addresses<br />Permissions - from here you can which modules will be available for anonymous and/or authenticated users<br />Roles - you can add roles such as administrator, moderator, etc<br />User settings - from this section you can configure the user registration settings, the emails notifying a user for new registration, password recovery, etc<br />Users - shows a list of your current users; you can also add new users or block existing ones<br />Administer>>user mgmt<br />
  5. 5. Allows you to customise user registration guidelines including the mails sent by your site to the user mail id.<br />This address must have a domain name of <>@mysite.com to avoid being classified as spam.<br />Install a captcha module like mollom to beat spam registrations. [required]<br />User mgmt>>user settings<br />
  6. 6. Here you see a list of all users on your site.<br />You can block them, delete them.<br />As user1 [God Mode] you can even change the password for any user.<br />So you never, ever give out user1’s pass to anybody.<br />User mgmt>>users<br />
  7. 7. The profiles area allows you to add fields for user registration.<br />Create category [personal details, contact information, extra info] to segregate content.<br />You can manage visibility of fields here. Eg: make email field a hidden profile field.<br />User enters details while registering or in his user area.<br />User mgmt>>profiles<br />
  8. 8. You need site maintainers, content editors, site moderators etc etc.<br />But you shouldn't give admin access to the site just like that to everybody.<br />Create roles that limit the access privilieges to each person so they can do exactly what they need to and no more.<br />Roles<br />
  9. 9. Type a new role [site admin] and click add role.<br />Now click edit permissions.<br />Give permissions as you see fit here for the user role.<br />User mgmt>>roles<br />
  10. 10. When no user is logged in, the user is called anonymous.<br />If a user has no permission for a module, the user cannot have access to the module’s content.<br />As – in, anonymous has [by default] only the access content privilege checked. Anonymous users cannot see views, use taxonomy, create content, see forums… unless specified here.<br />Understanding permissions<br />
  11. 11. When a user is logged in, they get the authenticated role by default.<br />This role should have permissions to access content from required module [not set by default, everytime a module is installed, permissions have to be given to it]<br />Users can be given custom roles also. They will get the sum result of all permissions on roles assigned to them.<br />
  12. 12. Do not give *administer nodes* privilege to anyone lightly. <br />Do not give *php input* privilege lightly.<br />Give as much as the user role requires.<br />Things to take care of<br />
  13. 13. Go to user mgmt>>users<br />Check box all users you want to give a role to<br />In update options, choose and grant the required role.<br />Giving roles to users<br />
  14. 14. For example, what happens if there is a company that repeatedly spams your forums with advertisements and marketing information? <br />Or, what happens if only people from a certain company should have access to your site?<br />Access rules<br />
  15. 15. User mgmt>> access rules<br />
  16. 16. Advanced user profiles – use cck to create a custom user profile type. Allows you to modify the user landing home page also.<br />Front_page - allows you to give a custom front page depending on the user’s role.<br />More user modules<br />