0

I have a Drupal 7 site that has additional fields added to the user profile page, to capture additional information (with these fields then displayed on the public-facing profile).

Only administrators should be able to edit non-admin profiles.

However, I am using !login_url (one time login) functionality in email confirmations to allow new users to set their own password and I need to retain this feature.

I have installed the User Protect module, but unless I enable the 'Edit own user account' permission, the one time login link returns a 'You are not authorized to access this page' message and the password cannot be entered.

Is there a way via User Protect, another module, or via custom code for me to retain the Change Password option, but remove access to all other fields that have been added to build a more complete profile?

Improve this question

1 Answer 1

Reset to default
0

You might be able to use the module: Password Hustle

Adds the password set form as an optional fields on the one click login. In other words, we encourage (hustle) the user into setting their password as they log into the site via a one click login.

Improve this answer
1
  • Thank you - I tried this module in a dev environment and it appears to do exactly what I need. Used in combination with User Protect module, I can restrict access to user profiles, but still allow one-time password setting.
    – MCG
    Commented Dec 1, 2014 at 10:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.