Remove Non-viewable Menu Items
Categories
Component ID
148128
Component name
Remove Non-viewable Menu Items
Component type
module
Component security advisory coverage
not-covered
Downloads
1560
Component created
Component changed
Component body
Drupal does not check to ensure that the user has access to view a node referenced by a custom menu item before it displays the menu item. This module searches through the {menu} table, looks for nodes, and checks to see which nodes the user is unable to view. Those nodes are added to the the menu tree with the access attribute set to FALSE, ensuring they do not appear in menus.
This was motivated by my use of the category_menu and cac_lite modules on a site I was building. Menu items which were not accessible to users in certain roles would appear even though they did not have access to them, creating usability and (minor) security problems.