10 Mar 2026

feedDrupal.org aggregator

The Drop Times: Making Governance Visible: Embedding Content Rules Directly Into Drupal

DrupalCamp NJ 2026 will take place from 12 March 2026 to 14 March 2026 at Princeton University in Princeton, New Jersey, bringing together Drupal developers, site builders, and community members for three days of training, sessions, and collaboration. Among the scheduled presentations is "Governance You Can See: Embedding Content Rules Directly Into Drupal," a session by Nathan Wallace that explores how governance guidance-often stored in documents and policies-can be embedded directly within Drupal's publishing experience to help teams maintain content quality, accountability, and editorial clarity.

10 Mar 2026 3:00pm GMT

DrupalCon News & Updates: Agency, Business & Marketing Track at DrupalCon Rotterdam

Rotterdam is calling - DrupalCon Europe 2026 is heading to the Netherlands this September, and the call for session proposals is officially open!

The Agency, Business & Marketing track is built for business owners, marketing team leaders, agency leaders, project managers, and sales teams who run on Drupal. It's consistently one of DrupalCon's most popular tracks. A platform to share insights, spark conversations, and raise your profile in the community.

Got a story worth telling? Submit your session proposal today!

Share Your Expertise

We're looking for bold, real-world perspectives across topics that are shaping agency and business success today, including:

  • AI-driven innovation in project delivery and management
  • Scaling smart: strategies for sustainable business growth
  • Building high-performance teams in a hybrid world
  • Client relationships that convert and last
  • Navigating digital transformation without losing momentum
  • Leadership in the modern agency landscape
  • Sales, growth marketing, and business development in 2025

Submit your session proposal today!

Make Your Proposal Impossible to Ignore

The strongest proposals don't just inform. They inspire action. Here's what makes a session stand out:

  • Lead with outcomes: what will your audience walk away knowing or doing differently?
  • Make it a conversation: interactive sessions create lasting impact. Show us how you'll engage the room
  • Keep it real:practical takeaways, lived experience and honest lessons resonate far more than theory.

"The DrupalCon stage is yours to own. Submit your proposal and join us in Rotterdam to shape the future of Drupal. Your expertise could be the spark that inspires the next big idea!".

10 Mar 2026 1:33pm GMT

Matt Glaman: The nightmare of permissions and OAuth scopes in Drupal

The Nightmare of Permissions and OAuth Scopes in Drupal

Drupal's role-based access control is one of its strengths. Permissions and roles are well-understood, and the system is mature. But the moment you step outside the standard cookie-based session - say, into OAuth with the authorization code flow - you hit a wall that the core permission model never anticipated.

Super-permissions and their hidden assumptions

Drupal treats administer nodes and bypass node access as super-permissions. If a user has either, NodeAccessControlHandler assumes they can perform any operation on any content type and skips the granular checks entirely. bypass node access is actually more powerful than administer nodes - a quirk of legacy cruft going back to early Drupal versions.

10 Mar 2026 1:00pm GMT