How to restrict direct access to the nodes but just allow views to access the required field of the particular node type?
For example in Views Slideshow we are sliding the image field that belongs to particular node type. But we don't want search engines to access & visitors to access the nodes belong to that node type.
Any suggestions?
A simple solution would be to not publish the nodes you don't want to be accessible. Views can still pull the data from those nodes.
If we unpublish nodes added by user1 they wont be editable by any other user even if the user have the rights to edit the content of that content type.
Restrict Node Page View seems a better way to restrict the direct access to any nodes of specific content type.
Usage is also fairly simple you just need to enable this module and configure the permissions for the nodes which are directly accessible as normal.
http://drupal.org/project/restrict_node_page_view
From the project page:
Have you ever used a slideshow nodetype that you need to be published but don't want the node be accessible by itself using then node/XXX path? This module is for you!
With this module you can disable direct access to node pages (node/XXX) based on nodetypes and permissions.
Enable the module and don't forget to configure your permissions.
An other module who do the same thing but with more functionalities.
Maintainers of this project ask to "Restrict Node Page View" Maintainer to merge projects in issues.
Advantages against "Restrict Node Page View" :
Disadvantage against "Restrict Node Page View" :
you should use node_access(), there are certain options that you can easily implement using hook_node_access(). Implementing node_access() allows you to make a decision as to who can access a node and who can create, delete, edit, or update such a node. Views, however, can still pull data from these nodes whatsoever.
Inspired by https://www.drupal.org/project/restrict_node_page_view you might write a small module yourself:
/**
* Implements hook_node_access()
*/
function MYMODULE_node_access($node, $op, $account) {
// Default checks
if (!is_object($node)) {
return NODE_ACCESS_IGNORE;
}
$type = is_string($node) ? $node : $node->type;
if($op == 'view' && arg(0) == 'node' && arg(1) === $node->nid) {
// Restrict access to full MYTYPE node for anon users
if ($type == 'MYTYPE' && user_is_anonymous()) {
return NODE_ACCESS_DENY;
}
}
// Default
return NODE_ACCESS_IGNORE;
}
Using the Rules module you can implement a rule that looks similar to this:
{ "rules_check_url" : {
"LABEL" : "Disallow node/* access",
"PLUGIN" : "reaction rule",
"OWNER" : "rules",
"REQUIRES" : [ "rules" ],
"ON" : { "init" : [] },
"IF" : [
{ "text_matches" : {
"text" : [ "site:current-page:url" ],
"match" : "node\/\\d+$",
"operation" : "regex"
}
}
],
"DO" : [
{ "drupal_message" : {
"message" : "Sorry, direct access to URLs like [site:current-page:url] is not allowed around here ...",
"type" : "error"
}
},
{ "redirect" : { "url" : "no_access" } }
]
}
}
The above rule does not (yet) take into account to only apply the "action" for selected roles only (eg so that admins can still use these paths to view a node). But for anybody a bit familiar with the Rules module, that is a straight forward "Condition" to add ...
To experiment with this rule in your own site, just copy the entire Rules code above, and paste it in a new Rule in your own site, created via the "Import" function. Then further edit/refine to make it fit in your own environment (e.g the "Sorry, ..." message to be shown).
