drupal-access-security

What problem does it solve?

This Skill ensures that only authorized users can access specific routes, content, or perform actions within a Drupal site, preventing unauthorized access and protecting sensitive data.

Core Features & Use Cases

• Permission Management: Define granular permissions for users and roles.
• Route Access Control: Secure specific pages and API endpoints using permissions, roles, or custom logic.
• Entity Access: Implement access control for custom and core entity types.
• CSRF Protection: Safeguard against Cross-Site Request Forgery for state-changing actions.
• XSS Prevention: Mitigate Cross-Site Scripting vulnerabilities in output.
• Use Case: You need to ensure that only users with the 'edit own project notes' permission can edit their own notes, and that an 'archive' action link is protected against CSRF attacks.

Quick Start

Implement Drupal access control and security for your module by defining permissions and securing routes.