This project is not covered by Drupal’s security advisory policy.

This module is unsupported due to a security issue the maintainer didn’t fix. See Book access - Critical - Unsupported - SA-CONTRIB-2017-35 for details.

If you want to use this module, your options are:

This module alters the book module permissions model by letting you specify access/modify/delete rights on a per-book basis. Normally, book-related permissions provided by drupal core apply across all books, but this module will let you drill down as granular as to letting specific users have specific rights for specific books.

This module is based loosely on forum_access.module.

In the past, the module development was sponsored by LifeWire and WorkHabit. It is now supported by time from The Sierra Club.


  1. Drupal Core book permissions will override book_access-provided permissions. So if a role is blocked from administering book content by Drupal Core, then there's nothing you can do in book_access to enable that.
  2. book_access will work fine with drupal core, but may potentially have odd interactions with other modules that alter book access rights. I'm more than happy to help with any issues though; feel free to open a bug report if you come across an issue related to this.

Version notes

  • Update Apr 24, 2013: New release! 7.x-2.1. See the release notes; see also the release notes for 7.x-2.0 since it had a very short shelf life. In short, 7.x-2.1 fixes a bug and 7.x-2.0 fixes two minor issues.

    I'm officially considering this module "stable." If you still find an issue, feel free to open a bug report, but the overall issue volume has gone down so feel confident that your use cases will be met smoothly.

  • Updating from a different release of the development snapshot is not supported. To install a newer development snapshot, you always need to uninstall the previous version before copying the new one.

    Development snapshots are intended only for testing. Don't use them in a production site, or for other purposes. If used in a production site, or other purposes, there will be no support for any resulting problems.

  • Branch 6.x-2 require branch 2.x of Variables API; first install the latest official Variables API release available, and then install Book access. Variables API and Book access must be enabled separately, or you will get an error about a PHP class not being found; see also the notes reported in the Variables API project page.

    (Note: previous version notes listed 7.x-2.x as requiring 2.x of Variables API, it no longer appears to be true.)

Updating from Drupal 6 to Drupal 7

  • If you installed the version 6.x-1, and you are updating to version 7.x-2, you need to:
    • Update to the latest 6.x-1 version
    • Update to the latest 6.x-2 version
    • Update to Drupal 7 and the latest 7.x-2 version
  • If you installed the version 6.x-2, and you are updating to version 7.x-2, you need to:
    • Update to the latest 6.x-2 version
    • Update to Drupal 7 and the latest 7.x-2 version

Project information