Here’s a recent scenario I encountered: a Drupal role needs to be assigned to certain users. The site is using a single sign on (SSO) system with a lot of users who could log in. But only some of those should be granted a certain permission. The list of those who can access the special permission role is automatically generated and put in place on the server on a daily basis, in a simple format with one line for each account name.
I have pulled out a generic version of this code and made it available on my GitHub.
Hook on login
First, we need to hook on login. When a user signs on, we want to find out if they should have the extra permission. This can be done with the hook_user_login hook.
/**
* Implements hook_user_login
*/
function permissions_from_file_user_login(&$edit, $account) {
// assign the "test role" role, if necessary.
_permissions_from_file_update_permissions($account);
// do not redirect password reset requests.
if (!isset($_POST['form_id']) || $_POST['form_id'] != 'user_pass_reset') {
if (isset($_GET['target'])) {
drupal_goto($_GET['target']);
}
}
}
Read file
Next we have another function that checks to see if the username is in the file or not:
/**
* Reads from file and determine whether the specified user is in the list
**/
function _permissions_from_file_is_role($account) {
$contents = file_get_contents('/var/usernames/roleusernames.csv');
return preg_match("/$account->name/",$contents);
// returns if name is in the file.
}
Assign or Remove Role
Finally, we can assign permissions based on whether or not their username is in the file.
/**
* Calls function that checks if permissions should be found
**/
function _permissions_from_file_update_permissions($account) {
$is_role = _permissions_from_file_is_role($account);
$role = user_role_load_by_name('test role');
if ($is_role) {
// add permissions to that user
user_multiple_role_edit(array($account->uid), 'add_role', $role->rid);
}
else {
// delete the role assignment, if it exists
user_multiple_role_edit(array($account->uid), 'remove_role', $role->rid);
}
}
Top comments (0)