By gcidd on

I'm a newbie to Drupal. I was referred to it by a colleague that's been using it for close to a year now; so please forgive the simplicity of the question.

The website I'm building is going to have a general section where un-authenticated users can view, but similar to Admin pages, there will be pages that only authenticated users will be able to view. My question then becomes how do I go about doing this? I understand with Drupal everything runs off nodes, and obviously the admin is a node. I'm just not sure about how this would be done.

Also, taking this one step further, I'll probably be uploading PDF documents to the website for authenticated users. I'm guessing this will go in the "files" folder. I just don't want people to be able to access the PDF (like if they put a shortcut to it) without authenticating.

Is there a link that someone can point me to on how to lock some of these items down? Would this be under the "blocks" menu?

Thank you so very much in advance for anyone's help.

Sincerely,
GCidd.

⋅ Categories: Drupal 5.x

Comments

iandickson’s picture

iandickson commented

Tags Staff, Clients, Public could control document access in a corporate site.

Ian Dickson

Likal.com

yelvington’s picture

yelvington commented

"Admin" is not a node. There are administrative tools in the system, but they're not nodes. Administrative access rights are handled separately from node access.

Content is stored in nodes.

Access control is applied globally to all node types, so if you make one type of content available to visitors, then all content is available. See administer->users->access control.

This isn't sufficient for your needs.

However, there are dozens of contributed modules that support more complex schemes; one of the taxonomy access modules is probably what you need. If you have multiple groups of users with differing access needs, then the Organic Groups module would be a better solution. You'll need to download, install and configure these add-ons.

As for file attachments, there is a "private" option that places Drupal access control between users and files. There is a performance cost, however, as PHP and Drupal must transfer the file, rather than Apache directly handling the operation. See administer->settings->file system.

Blocks are something else entirely; they're page components such as those on the right side of this page.

gcidd’s picture

gcidd commented

Thank you very much for pointing me in the right direction. I chose to use "Tac_lite" to administer this, and it worked just the way I needed. Thank you again very much.