123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102 |
- CONTENTS OF THIS FILE
- ---------------------
- * Introduction
- * Requirements
- * Recommended modules
- * Installation
- * Configuration
- * Drush commands
- INTRODUCTION
- ------------
- Account Sentinel perceives changes made to a configurable set of monitored
- roles' accounts, even those that are results of direct database modification
- (e.g. SQL injection). A set of e-mail addresses can be configured to be notified
- when such a change is detected, also a log of changes can be viewed in Drupal
- and via Drush for manual review.
- * For a full description of the module, visit the project page:
- https://www.drupal.org/project/account_sentinel
- * To submit bug reports and feature suggestions, or to track changes:
- https://www.drupal.org/project/issues/account_sentinel
- REQUIREMENTS
- ------------
- No special requirements.
- RECOMMENDED MODULES
- -------------------
- * Password Strength (https://www.drupal.org/project/password_strength):
- When enabled, password change events will also store the strength of the
- new password.
- INSTALLATION
- ------------
- * Install as you would normally install a contributed Drupal module. See:
- https://drupal.org/documentation/install/modules-themes/modules-7
- for further information.
- CONFIGURATION
- -------------
- * Configure user permissions in Administration > People > Permissions:
- - Access Account Sentinel logs
- Users with this permission are able to access the logs of Account
- Sentinel on Administration > Reports > Account Sentinel log.
- - Change Account Sentinel's configuration
- Users with this permission are able to change the configuration of Account
- Sentinel on Administration > Configuration > System > Account Sentinel
- settings.
- * Configure the module in Administration > Configuration > System > Account
- Sentinel settings:
- - Monitored roles
- Choose which roles' users should be monitored. Typically any administrative
- roles should be checked.
- - Recipient(s) of notification e-mails
- You may provide e-mail addresses to send notifications to. The format
- should be (if not empty):
- * user@example.com
- * user@example.com, anotheruser@example.com
- * User <user@example.com>
- * User <user@example.com>, Another User <anotheruser@example.com>
- - Automatic DB check method
- Account Sentinel periodically compares Drupal's data about users with its
- own snapshots of monitored users. You can configure with this option what
- the trigger for these audits should be.
- * [Optional] Set last audit warning threshold
- Account Sentinel will show a warning if it's been a while since the last
- database audit. By default this warning is shown after 3 days. You can
- change this value using Drush:
- drush vset --yes account_sentinel_audit_warn_after NEW_VALUE
- Where NEW_VALUE is the threshold in seconds.
- DRUSH COMMANDS
- --------------
- * account-sentinel-audit (as-audit)
- Runs the Account Sentinel database audit.
- * account-sentinel-show (as-show)
- Shows an event's details or a list of the most recent events.
- Please consult "drush help as-show" for more information.
|