windmaomao's sandbox: ACL Access

This module adds additional acl entry for content. Other than the built-in view, update, delete ACLs comes with acl module, sometimes we want to have extra ones , ex. to allow download file node, etc.

The module currently allow acls to be set for any content node. For each node, either grant and block permission can be set to any user, or any user role type. Since this is a library similar as acl module, you can call functions to return permission status of any content node by permission type, and then implement the permission behavior in your custom module.

By default,

• grant user and deny user take precedence over grant user role and deny user role
• grant and deny are exclusive; i.e., a user or user role cannot be both granted and denied permission to access.
• grant user takes precedence over grant user role, deny user, and deny user role. For example, if a user is granted permission to access a file, this user may access the file even though s/he is denied due to his/her memberhip in a user role that is denied access
• deny user role takes precedence over grant user role; i.e., If a user is granted access by membership in role A, and is denied access by membership in role B, then the user is denied access.

Further improvement includes,

• add options page to add unlimited number of permission type, ex. download
• add options page to fine tune each permission type
• add support to some default permission type, ex. attached file node download etc. By default, the behavior of permission isn't implemented in this module
• remove dependency on chosen multiselect module, use it as an option