Obscurum Per Drupalius

Creating a new Drupal site in a local dev environment can be quick and painless, or it can probably be a super-complex and intimidating endeavor. I will demonstrate my personal recipe, of the "quick-and-painless" variety, which has been my go-to method for a couple of years now. Hopefully it will work as smoothly for you as it does for me.

Imagine a website that sells widgets. Each widget has a node, `/widget/1`, `/widget/248`, etc. The website has three roles, and each role needs to have access to the widget nodes, but each role needs exclusive access to certain fields. Do we need to create three types of widget nodes, make a custom module, or go fully unDrupal and hack out a solution?

In the spirit of seeing how much functionality we can squeeze out of a D9/10 Core install, here are some more use cases where permissions could be tweaked in creative and/or advanced ways.

Building on Drupal Core's OOTB permission options from the last article, let's go a little further this time. But let's stay in the Core box and look at a combination of modules that are included in Drupal 10 Core, but which are not enabled in an OOTB install - Content Moderation and Workflows.

One of Drupal's strengths is its permissioning system. Out of the box, you can set up a tiered permission system pretty easily with, for example, authors, editors, approvers, and of course anonymous users who can read the site and not much else.