User Access Control
Objectives
- Create a testing user (aside from the administrator user)
- Create a role
- Assign the test user a role
- Configure permissions
Concepts
Drupal Users, Roles, and Permissions
You can allow people to access certain areas of your site, and restrict access to other areas, using access control. Visitors to your site can be registered (or register themselves) to obtain a username and password. Once a user is registered, xe may be assigned to various roles. Each role has a set of permissions that provide fine grained control over which aspects of the site users in that role may access.
Creating users
To create a new user:
- Navigate to: Administer > People
- Click the "Add User" link to create a new user.
- Fill in the details for the user (username, email, password, groups, etc.)
- Click "Save"
Configuring User Registration
You can configure whether users can manually register on your site, along with registration criteria. To do so, visit:
Administer > Configuation > People > Account Settings
Primary Drupal roles
There are three primary types of users in Drupal 7 (standard installation).
- Anonymous - visitors who have not signed in to your site.
- Authenticated - users who have signed in with a username and password.
- Administrator - trusted users who have advanced permissions on your site.
Creating Roles
To create a new role:
- Navigate to: Administer > People > Permissions > Roles
- Find the table of existing roles
- Fill in the empty field, below the table, with a role name
- Click the "Add role" button
You can immediately edit the permissions for your new role by clicking the "edit permissions" button.
Managing Permissions
To manage permissions for all roles on your site:
- Navigate to: Administer > People > Permissions
- You will be presented a long table of permissions, with columns for each role.
- Click the check box in the column for each role/permission combination that you wish to grant