Using a mandatory CCK field for access control (password field).

Events happening in the community are now at Drupal community events on www.drupal.org.
rick hood's picture

I posted this topic here in the Drupal forums, but no responses yet: http://drupal.org/node/336621

I have a use-case where the client does not want to log in first and then post something, and posting cannot be allowed for anonymous users - it's just for one specific content type that is used rarely.

All I could think of to do this is to put a CCK field in that content type, make it mandatory and give it only one allowed value (the password) thus that field would act like a password field. Is this secure? The form can't be submitted unless the value is correct, but I don't know if somehow the form validation can be by-passed.

Comments

Clever! That would be secure

mlncn's picture

Clever! That would be secure for a hard-coded password. Validation on that should be perfectly reliable.

The arguably better solution would be http://drupal.org/project/inline_registration or http://drupal.org/project/lazyreg or the like.

It's a longtime want for us at Agaric, we still haven't gotten around to playing with these possible solutions: http://agaricdesign.com/note/registration-flow-let-people-register-or-lo...

benjamin, Agaric Design Collective

benjamin, agaric

Thanks Ben!

rick hood's picture

Oh I didn't know about those other two modules - I'll have a look at those too.

Western Massachusetts

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: