Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
In my opinion, permissions are currently a weakspot in Drupal, especially for community-based websites, where many permissions would depend on user group membership (such as permission to edit content owned by a member of the same user group) and many finer permissions are needed, such as being able to add content to fields, but not edit.
Goal of this project is to create permission system using node reference field. In this scenario my nodes are products and users are printers. Site admin can assign printer to each product and printer can only see products that are referenced to him.
Using hook_node_access I can control the access, but there is a problem with Views where all products are displayed, despite of the limit.
I have created a custom content type with a field ('field_table_2') that is a (list of) paragraph element reference entity.
The paragraph entity, contains 'select' fields (e.g. 'field_rsn', 'field_added', 'field_deleted' ), that we need to hide or show according to selection.
We are reading about Conditional-form-fields, but we cannot find a way to refer to the subform field, eg.:
Hope you don't mind, but will help me a lot to see your opinion on the following. What do you think about the plugin idea described bellow?
A plugin to complement the other security solutions on Drupal. It would work like this:
- create a threat map of the application in case of an attack
- it doesn't matter how the hacker got access and what vulnerability he used. That means It won't look for attack vectors because can be 0days attacks.
- will only monitor those points where a hacker who gained access would enter
As the subject says, the libraries file isn't loading the javascript files under (icemagic.libraries.yml).
(Also english isn't my first language so apologies in advance for my grammar)