[ Thanks to Bhushan
Pangaonkar for this link. ]
“Having Drupal simplify the implementation of your access
control policies does not mean that the task is a trivial one.
There is still much thought that needs to go on behind the scenes
in order to create a sophisticated, and above all, effective policy
for controlling access to the site. Because of this, we will spend
a bit of time exploring the ramifications of the various choices
available, instead of simply listing them. Taking a holistic
approach to implementing an access control policy will ensure you
don’t end up with any nasty surprises down the line.“Specifically, this article will look at Planning an access
policy, Roles, Users, and Access rules…”