Book Image

Drupal 7 First Look

Book Image

Drupal 7 First Look

Overview of this book

Drupal 7 contains features for which site administrators have been clamoring for years, including support for fields, an improved administration interface, better database support, improved theming, and more. You could of course make a laborious search on sites, blogs, and many online tutorials that would promise to update you about every new feature, but there's an even better way to know all about Drupal 7's new features: Drupal 7 First Look is the first and only book that covers all of the fantastic new features in Drupal 7 in depth and covers the process of upgrading your Drupal 6 site to Drupal 7. If you've used Drupal 6 and want to use Drupal 7, you need this book.Drupal 7 First Look takes an in-depth look into all of the major new features in Drupal 7 so you can quickly take full advantage of Drupal 7. It also assists you in upgrading your site to Drupal 7. Some of the new features in Drupal 7 include: Fields API, based on Drupal 6 CCK, which allows you to easily build your own content types Improved user interface for administering your website Built-in support for working with images and files Improved security for the site and users of the site Completely rewritten database layer DBTNG to make working with the database easier and more secure. Improved API for custom module development and user interface theming
Table of Contents (13 chapters)
Drupal 7 First Look
Credits
About the Author
About the Reviewer
Preface
Index

Node access and permission changes


Several changes were made to the node access system and permission system to make it easier to make Drupal more secure. Let's look at the new features that have been added first.

Added methods

The Node API has been extended to include several new methods to give you more information and better control over the permission system.

hook_node_access

This hook allows you to influence whether or not a particular operation can be performed by a user on a given node. You are passed the node being accessed as well as the account performing the action. You are also given one of four possible operations: create, delete, update, or view. You should return one of the following constants:

  • NODE_ACCESS_ALLOW if the operation is allowed

  • NODE_ACCESS_DENY if the operation should be prevented

  • NODE_ACCESS_IGNORE if your module does not care one way or the other

This hook takes the place of the old hook_access module from Drupal 6.

hook_node_access_records_alter

Similar to hook_node_access...