Am trying to get a handle on security issues and am wondering if code run from the PHP input filter, nodes, and/or php blocks is executed with susexec or if the code is executed as nobody?
I would like to prevent users from seeing a navigation menu block and then individual menu items based on what user role they have. The only way I see to do that is to thow in a php statement drupal will check before displaying the block. I still haven't seen how to limit access to individual links. So if someone will point me in the right direction within the interface to do these things or will tell me the variable in which drupal stores it's user roles I would appreciate it.