bachirandClaude Sonnet 5
f8ae2d6a9e
All the ledger data is confidential (real client names, amounts, associate balances) -- revoke 'access content' from the anonymous role so nodes, taxonomy terms, and JSON:API all deny anonymous reads (verified: JSON:API returns an empty data[] + "omitted" notice instead of the records, /lignes and /dashboard 403). Set the site's 403 page to /user/login: anonymous visitors hitting "/" (the front page is /lignes) land on the login form instead of an access-denied page; authenticated users still land on /lignes as before since they still hold 'access content' via the authenticated role. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
17 lines
341 B
YAML
17 lines
341 B
YAML
uuid: e096ecdf-38f3-4db4-a56d-ab607bad664a
|
|
langcode: en
|
|
status: true
|
|
dependencies:
|
|
config:
|
|
- filter.format.restricted_html
|
|
module:
|
|
- filter
|
|
_core:
|
|
default_config_hash: Tus1ZTNXKIOnrennR1hnTbc7wUPBXHTUm5UdCpEhJSk
|
|
id: anonymous
|
|
label: 'Anonymous user'
|
|
weight: 0
|
|
is_admin: false
|
|
permissions:
|
|
- 'use text format restricted_html'
|