This is a great module, I like it a lot and I have banned similar functionality from https://drupal.org/project/drd in favour of recommending userone for those who would like to protect the user 1 account.

When I went through all the features today I realized that there is an option left which would allow other admins to grant themselves access to the user 1 again: they could simply disable the module userone and then do what ever they want. So it seems important that this gets avoided by either hiding userone from admin/modules or by disabling the checkbox.

CommentFileSizeAuthor
#8 hide_or_protect_userone-2288269-8.patch815 bytesjurgenhaas
#6 hide_or_protect_userone-2288269-6.patch913 bytesjurgenhaas
#4 hide_or_protect_userone-2288269-4.patch872 bytesjurgenhaas

Comments

mrpauldriver’s picture

mrpauldriver commented

This does seem like a bit of an oversight. Perhaps Drupal does not allow this?

The userone module should only be accessible to User 1

jurgenhaas’s picture

jurgenhaas
he/him
Primary language German
Location Gottmadingen
commented

It should be possible with a hook_form_alter() to just set #access of that checkbox to FALSE.

mrpauldriver’s picture

mrpauldriver commented

Not a coder myself.

jurgenhaas’s picture

jurgenhaas
he/him
Primary language German
Location Gottmadingen
commented
Status: Active » Needs review
StatusFileSize
new hide_or_protect_userone-2288269-4.patch872 bytes

Here is a patch providing the functionality.

jurgenhaas’s picture

jurgenhaas
he/him
Primary language German
Location Gottmadingen
commented
jurgenhaas’s picture

jurgenhaas
he/him
Primary language German
Location Gottmadingen
commented
StatusFileSize
new hide_or_protect_userone-2288269-6.patch913 bytes

Sorry, the previous patch was the wrong file, here comes the correct one.

Kristina Katalinic’s picture

Kristina Katalinic commented

The patch in #6 does not work with Module Filter enabled and since the Module Filter stats show 283,131 sites currently report using this module it would be really important to have this feature compatible with Module Filter otherwise we could all use hidden = TRUE in our .info files

jurgenhaas’s picture

jurgenhaas
he/him
Primary language German
Location Gottmadingen
commented
StatusFileSize
new hide_or_protect_userone-2288269-8.patch815 bytes

Re-rolled for drush make.

mrpauldriver’s picture

mrpauldriver commented

I'm still seeing userone when using module_filter

donapis’s picture

donapis commented
Status: Needs review » Needs work

I'm also still seeing userone module when using module_filter. Only description is hidden.

astonvictor’s picture

astonvictor commented
Status: Needs work » Closed (outdated)

D7 reached its EOL back in January 2025, and there is no active release for D7 for this module anymore.
Development or support is not planned for D7. All D7-related issues are marked as outdated in a bunch.

Now that this issue is closed, please review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, please credit people who helped resolve this issue.