Define Drupal access control patterns for routes and entities.
npx skills add https://github.com/edutrul/drupal-ai --skill drupal-access
Please help me install this Agent Skill. Skill: drupal-access Source: https://github.com/edutrul/drupal-ai/tree/main Command: npx skills add https://github.com/edutrul/drupal-ai --skill drupal-access
Drupal access control is error-prone without standardized patterns for permissions, access callbacks, and entity-level checks.
Configure a route with a DI-based access checker to enforce a specific permission.
High-intent search queries and answers about installing and using this skill.
Drupal access control uses AccessResult objects within custom access checkers to enforce permissions on routes. You configure route requirements and apply entity-level checks to standardize access decisions and ensure proper cacheability across your application.
Defining fine-grained Drupal permissions involves declaring rules in permissions.yml and implementing hook_node_access for entity-level checks. Using AccessResult ensures these permission decisions maintain proper cacheability metadata.
Configuring a route with a DI-based access checker requires defining access requirements in your routing file and injecting services into a custom checker class. This enforces specific permissions while following Drupal 11 best practices for dependency injection.
Drupal 11 best practices promote DI-based access checks to enforce permissions and route requirements. Using dependency injection ensures custom access checkers properly manage services and maintain accurate cacheability in access decisions.
Incorrect cacheability in Drupal entity access checks often occurs when AccessResult objects are not properly used to propagate metadata. Applying standardized patterns for hook_node_access and entity checks ensures access decisions carry correct cacheability.
proofoftomDefine Drupal routes and controllers mapping URLs to PHP code.
proofoftomImplement Drupal access control with permissions, route access, CSRF protection, and XSS prevention.
AJV009Design Drupal 10/11 content types and fields using the Entity API decision matrix.
AJV009Audit Drupal users, roles, modules, and configurations for security weaknesses.
