This project is not covered by Drupal’s security advisory policy.

Canvas Access lets you choose who can edit which Drupal Canvas pages, and who can use which components, by role or by person. Drupal's permissions decide whether someone can edit Canvas pages at all; this module narrows that down. You manage it in an Access section inside Canvas.

What you can restrict

  • Pages: group pages into page folders and choose who can edit each folder. A single page can also have its own access.
  • Components: choose who can use the components in a Canvas component folder. Everyone else does not see them in the library.
  • Code components: choose who can edit the code components in a Canvas code component folder.

Editors only see the pages they can edit. A restricted component that is already on a page keeps working: others can still change its settings, but cannot add more of it.

To check your setup, pick a person or a role and see what they can edit and use, with the reason for each.

Deployment

Folders and their role grants are configuration with fully validatable schemas, so you can deploy them and ship them in recipes. The people you grant access to, and which pages are in which folder, are content.

Project information

Releases