added account_sentinel contrib module

2019-10-21 14:56:57 +02:00
parent 50d08c7efd
commit a7f0bb7650
12 changed files with 2968 additions and 0 deletions
@@ -0,0 +1,102 @@
+CONTENTS OF THIS FILE
+---------------------
+
+ * Introduction
+ * Requirements
+ * Recommended modules
+ * Installation
+ * Configuration
+ * Drush commands
+
+
+INTRODUCTION
+------------
+
+Account Sentinel perceives changes made to a configurable set of monitored
+roles' accounts, even those that are results of direct database modification
+(e.g. SQL injection). A set of e-mail addresses can be configured to be notified
+when such a change is detected, also a log of changes can be viewed in Drupal
+and via Drush for manual review.
+
+ * For a full description of the module, visit the project page:
+   https://www.drupal.org/project/account_sentinel
+
+ * To submit bug reports and feature suggestions, or to track changes:
+   https://www.drupal.org/project/issues/account_sentinel
+
+
+REQUIREMENTS
+------------
+
+No special requirements.
+
+
+RECOMMENDED MODULES
+-------------------
+
+ * Password Strength (https://www.drupal.org/project/password_strength):
+   When enabled, password change events will also store the strength of the
+   new password.
+
+
+INSTALLATION
+------------
+
+ * Install as you would normally install a contributed Drupal module. See:
+   https://drupal.org/documentation/install/modules-themes/modules-7
+   for further information.
+
+
+CONFIGURATION
+-------------
+
+ * Configure user permissions in Administration > People > Permissions:
+
+   - Access Account Sentinel logs
+     Users with this permission are able to access the logs of Account
+     Sentinel on Administration > Reports > Account Sentinel log.
+
+   - Change Account Sentinel's configuration
+     Users with this permission are able to change the configuration of Account
+     Sentinel on Administration > Configuration > System > Account Sentinel
+     settings.
+
+ * Configure the module in Administration > Configuration > System > Account
+   Sentinel settings:
+
+   - Monitored roles
+     Choose which roles' users should be monitored. Typically any administrative
+     roles should be checked.
+
+   - Recipient(s) of notification e-mails
+     You may provide e-mail addresses to send notifications to. The format
+     should be (if not empty):
+      * user@example.com
+      * user@example.com, anotheruser@example.com
+      * User <user@example.com>
+      * User <user@example.com>, Another User <anotheruser@example.com>
+
+   - Automatic DB check method
+     Account Sentinel periodically compares Drupal's data about users with its
+     own snapshots of monitored users. You can configure with this option what
+     the trigger for these audits should be.
+
+ * [Optional] Set last audit warning threshold
+     Account Sentinel will show a warning if it's been a while since the last
+     database audit. By default this warning is shown after 3 days. You can
+     change this value using Drush:
+
+     drush vset --yes account_sentinel_audit_warn_after NEW_VALUE
+
+     Where NEW_VALUE is the threshold in seconds.
+
+
+DRUSH COMMANDS
+--------------
+
+ * account-sentinel-audit (as-audit)
+   Runs the Account Sentinel database audit.
+
+ * account-sentinel-show (as-show)
+   Shows an event's details or a list of the most recent events.
+   Please consult "drush help as-show" for more information.