Drupal 7 Module Development

Chapter 9
}
// Check anonymous users.
else if ($access) {
$grants['role_access'][] = $rid;
}
With this code in place, we can easily assign the proper permissions to allow roles to
view content as if they were authenticated users.
Using hook_node_access_records_alter()
This is great! Using very little code, we have made a major change to the business
logic of the Role Access module, something that was nearly impossible prior
to Drupal 7.
We still have a problem, however. Since all custom roles are also given the
'authenticated user' role, we are storing grants in the {node_access} table that may
be too permissive. It may be that we do not want to store the records at all. So we
have another hook we can use, in conjunction with a new permission.
First, we edit role_access_extend_permission():
/**
* Implement hook_permission().
*/
function role_access_extend_permission() {
return array(
'view role access as authenticated user' => array(
'title' => t('View role-restricted content as authenticated
user'),
'description' => t('Allow anonymous users to view content
created by authenticated users. Lack of this permission removes access
for users in custom roles.'),
),
'assign role access as authenticated user' => array(
'title' => t('Save role-restricted content as authenticated
user'),
'description' => t('Save new and updated content so that
authenticated users have permissions. Normally this is set to
off.'),
),
);
}
[ 279 ]