Image Style Access

Allows granular access control to images and image style derivatives.

This module provides access control for image files. Each access configuration can be set to allow or deny access to images and their derivatives by:

• File source (scheme), e.g. private files
• Base image file location
• Image style

The criteria for matching a configuration can be further narrowed with plugins. Four plugins are included:

Default

Match image style and location with no additional controls (i.e. always match).

User

Control access by specific user.

User role

Control access by role of the user accessing the image.

Path context

Use contexts derived from the image location to control access with path-based conditions. This plugin is provided by the included Image Style Access Path module and requires the Chaos tool suite (ctools).

Furthermore, access configurations can be ordered by priority. Individual configurations can also be enabled or disabled.

With this module, it will be possible to:

• Deny access to specific image styles for public images.
• Deny anonymous access to private images.
• Allow anonymous access to previews of private images.
• Allow authenticated access to private images.

Path context access

The Path context plugin only allows a single condition in an access configuration. To use a combination of conditions, custom access rulesets can be set up to group multiple conditions together using the Custom rulesets module (included with the Chaos tool suite).

Extending access control

This module provides an API for implementing custom access control behaviors.