Drupal 7 Module Development

Drupal Permissions and Security
$items['user/%user/content'] = array(
'title' => 'Content creation',
'page callback' => 'example_user_page',
'page arguments' => array(1),
'access callback' => 'example_user_access',
'access arguments' => array('view content creation permissions',
'administer users'),
'type' => MENU_LOCAL_TASK,
);
return $items;
}
For this code to succeed, we must also provide the new function
example_user_access():
/**
* Access callback that checks multiple permissions.
*
* Takes a list of permissions and requires that all return
* TRUE.
*/
function example_user_access() {
foreach (func_get_args() as $permission) {
if (!user_access($permission)) {
return FALSE;
}
}
return TRUE;
}
Note: When developing your module, you must rebuild the menu
cache in order to see permission changes. You can do this by
emptying the cache_menu table, or using the tools provided by
Devel module or Drush.
You can even dictate more complex logic within an access control function. Suppose
we also want to prevent users from viewing pages other than their own. We would
edit the functions in the following way:
/**
* Implement hook_menu().
*/
function example_menu() {
$items['user/%user/content'] = array(
'title' => 'Content creation',
[ 222 ]