materio-base-d7/sites/all/modules/contrib/security/account_sentinel

CONTENTS OF THIS FILE
---------------------

* Introduction
* Requirements
* Recommended modules
* Installation
* Configuration
* Drush commands


INTRODUCTION
------------

Account Sentinel perceives changes made to a configurable set of monitored
roles' accounts, even those that are results of direct database modification
(e.g. SQL injection). A set of e-mail addresses can be configured to be notified
when such a change is detected, also a log of changes can be viewed in Drupal
and via Drush for manual review.

* For a full description of the module, visit the project page:
https://www.drupal.org/project/account_sentinel

* To submit bug reports and feature suggestions, or to track changes:
https://www.drupal.org/project/issues/account_sentinel


REQUIREMENTS
------------

No special requirements.


RECOMMENDED MODULES
-------------------

* Password Strength (https://www.drupal.org/project/password_strength):
When enabled, password change events will also store the strength of the
new password.


INSTALLATION
------------

* Install as you would normally install a contributed Drupal module. See:
https://drupal.org/documentation/install/modules-themes/modules-7
for further information.


CONFIGURATION
-------------

* Configure user permissions in Administration > People > Permissions:

- Access Account Sentinel logs
Users with this permission are able to access the logs of Account
Sentinel on Administration > Reports > Account Sentinel log.

- Change Account Sentinel's configuration
Users with this permission are able to change the configuration of Account
Sentinel on Administration > Configuration > System > Account Sentinel
settings.

* Configure the module in Administration > Configuration > System > Account
Sentinel settings:

- Monitored roles
Choose which roles' users should be monitored. Typically any administrative
roles should be checked.

- Recipient(s) of notification e-mails
You may provide e-mail addresses to send notifications to. The format
should be (if not empty):
* user@example.com
* user@example.com, anotheruser@example.com
* User
* User , Another User

- Automatic DB check method
Account Sentinel periodically compares Drupal's data about users with its
own snapshots of monitored users. You can configure with this option what
the trigger for these audits should be.

* [Optional] Set last audit warning threshold
Account Sentinel will show a warning if it's been a while since the last
database audit. By default this warning is shown after 3 days. You can
change this value using Drush:

drush vset --yes account_sentinel_audit_warn_after NEW_VALUE

Where NEW_VALUE is the threshold in seconds.


DRUSH COMMANDS
--------------

* account-sentinel-audit (as-audit)
Runs the Account Sentinel database audit.

* account-sentinel-show (as-show)
Shows an event's details or a list of the most recent events.
Please consult "drush help as-show" for more information.