HorusKol
HorusKol

Reputation: 8696

How do I limit access to menu by role in Drupal?

I'm building a Drupal site, and have added two custom menus to give two different groups of management links (some people will see one menu or the other, some will see both, and anonymous/low-level users will see neither).

The problem is, at the moment, all users can see the menus (but the menu items are not visible).

I'm trying to create a simple permissions module - and have created the administration forms which specify which menus are viewable by which role.

But I can't find a hook which lets me override the visibility of a particular menu - only the items.

So, how do I limit access to menu by role in Drupal now that I have a list of permissions in the database?

--

I have looked at Menu per Role and Menu Access. Unfortunately, these work at the item level and not on the menus directly.

Upvotes: 5

Views: 15974

Answers (7)

LoopDuplicate
LoopDuplicate

Reputation: 473

The Menu Admin Per Menu module will allow you to restrict edit access to each menu by role. https://www.drupal.org/project/menu_admin_per_menu

Upvotes: 0

steve
steve

Reputation: 71

Each menu is in a block, and blocks can be set to be visible for given user group (access level). On drupal admin site: Structure/Blocks

Upvotes: 7

Daniel Wehner
Daniel Wehner

Reputation: 2189

As long you use a block as a menu you can use the access by role for block setting, provided by core.

Upvotes: 1

HorusKol
HorusKol

Reputation: 8696

I've come up with a solution - instead of using the auto-generated menu blocks for display, I've created a single block and put the following code in my module:

function amh_menu_block($op = 'list', $delta = 0, $edit = array())
{
    if ($op == 'list') {
        $blocks[0] = array(
            'info' => t('AMH Menu block'),
            'weight' => 0,
            'status' => 1,
            'region' => 'left',
        );

        return $blocks;
    } elseif ($op == 'view') {
        switch($delta) {
            case 0:
                $block = array(
                    'subject' => '',
                    'content' => _amh_menu_display(),
                );

                break;
        }

        return $block;
    }
}

function _amh_menu_display()
{
    global $user;

    $content = '';

    if ($user->uid != 0) {
        $result = db_query('SELECT * FROM {amh_menu_permission} p LEFT JOIN {menu_custom} m ON p.menu_name = m.menu_name LEFT JOIN {users_roles} u ON p.rid = u.rid WHERE u.uid = %d OR p.rid = 2', $user->uid);
    } else {
        $result = db_query('SELECT * FROM {amh_menu_permission} p LEFT JOIN {menu_custom} m ON p.menu_name = m.menu_name WHERE p.rid = 1');
    }
    $menus = array();
    while ($m = db_fetch_object($result)) {
        $menu = menu_tree($m->menu_name);

        if ($menu) {
            $content .= "\r\n<h2>" . $m->title . "<h2>\r\n";
            $content .= theme_menu_tree($menu);
        }
    }

    return $content;
}

This seems to work fine.

Upvotes: 0

mirzu
mirzu

Reputation: 1831

It's not the most elegant solution, but you can do your access check in the theme.

Upvotes: 0

Nikit
Nikit

Reputation: 5128

For menu listing this function work: menu_get_names();
But it hasn't any permission checks or hooks.
Where did you want to restrict menu list? if at node editing you can alter menu there via hook_form_alter.

Upvotes: 0

Kevin
Kevin

Reputation: 13226

Menu Per Role module?

http://drupal.org/project/menu_per_role

Upvotes: 2

Related Questions