Currently the only permission which controls access to user profiles is "access user profiles". This seems rather limited. I began thinking about a module to extend the available permissions, but soon realised that there isn't (or doesn't seem to be) a user profile access API like there is with the node access API.

So, how can I got about adding more fine-grained permissions? Do I have to patch user.module? And would you consider adding more fine-grained permissions to future releases? I was thinking, in the first instance, adding the permission "access user profiles for users with xxx role" for each role.

Comments

jim0203’s picture

jim0203 commented
Category: feature » support

I've started writing a module which implements this, based on a pretty hacky patch of user.module. See http://drupal.org/node/546188.

Am I going about this the right way? Any chance that a similar change would be made to user.module to allow for user profile access modules to work? I'm aware that my own patch is nasty, but I wanted to get started on this.

Any advice from people who actually know what they are doing will be gratefully received.

jim0203’s picture

jim0203 commented

Can anyone who know user.module pretty well help me out on this, please? I want to know if the lack of permissions is an oversight or if there's a good reason for it - and if the former is true, how we can go about developing a system whereby modules can add permissions a la node access.

kars-t’s picture

kars-t commented
Status: Active » Fixed

Hi

I am closing this issue to clean up the issue queue. Feel free to reopen the issue if there is new information and the problem still resides. If not please make sure you close your issues that you don't need any more.

Maybe you can get support from the local user group. Please take a look at this list at groups.drupal.org.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.