How do I limit access to menu by role in Drupal?

Question

I'm building a Drupal site, and have added two custom menus to give two different groups of management links (some people will see one menu or the other, some will see both, and anonymous/low-level users will see neither).

The problem is, at the moment, all users can see the menus (but the menu items are not visible).

I'm trying to create a simple permissions module - and have created the administration forms which specify which menus are viewable by which role.

But I can't find a hook which lets me override the visibility of a particular menu - only the items.

So, how do I limit access to menu by role in Drupal now that I have a list of permissions in the database?

--

I have looked at Menu per Role and Menu Access. Unfortunately, these work at the item level and not on the menus directly.

Answer 1

I've come up with a solution - instead of using the auto-generated menu blocks for display, I've created a single block and put the following code in my module:

function amh_menu_block($op = 'list', $delta = 0, $edit = array())
{
    if ($op == 'list') {
        $blocks[0] = array(
            'info' => t('AMH Menu block'),
            'weight' => 0,
            'status' => 1,
            'region' => 'left',
        );

        return $blocks;
    } elseif ($op == 'view') {
        switch($delta) {
            case 0:
                $block = array(
                    'subject' => '',
                    'content' => _amh_menu_display(),
                );

                break;
        }

        return $block;
    }
}

function _amh_menu_display()
{
    global $user;

    $content = '';

    if ($user->uid != 0) {
        $result = db_query('SELECT * FROM {amh_menu_permission} p LEFT JOIN {menu_custom} m ON p.menu_name = m.menu_name LEFT JOIN {users_roles} u ON p.rid = u.rid WHERE u.uid = %d OR p.rid = 2', $user->uid);
    } else {
        $result = db_query('SELECT * FROM {amh_menu_permission} p LEFT JOIN {menu_custom} m ON p.menu_name = m.menu_name WHERE p.rid = 1');
    }
    $menus = array();
    while ($m = db_fetch_object($result)) {
        $menu = menu_tree($m->menu_name);

        if ($menu) {
            $content .= "\r\n<h2>" . $m->title . "<h2>\r\n";
            $content .= theme_menu_tree($menu);
        }
    }

    return $content;
}

This seems to work fine.

Answer 2

Each menu is in a block, and blocks can be set to be visible for given user group (access level). On drupal admin site: Structure/Blocks

Answer 3

Menu Per Role module?

http://drupal.org/project/menu_per_role

Answer 4

As long you use a block as a menu you can use the access by role for block setting, provided by core.

Answer 5

For menu listing this function work: menu_get_names();
But it hasn't any permission checks or hooks.
Where did you want to restrict menu list? if at node editing you can alter menu there via hook_form_alter.

Answer 6

It's not the most elegant solution, but you can do your access check in the theme.

Answer 7

The Menu Admin Per Menu module will allow you to restrict edit access to each menu by role. https://www.drupal.org/project/menu_admin_per_menu