Talking Drupal #472 - Access Policy API

Today we are talking about The Ripple Makers program, How it benefits Drupal Association members, and Why it’s important to Drupal with guest Julia Kranzthor. We’ll also cover Migrate Boost as our module of the week. For show notes visit: https://www.talkingDrupal.com/480 Topics What is Ripple Makers Taxes Why did the Drupal Association (DA) membership program need overhauling Are DA individual memberships different than Ripple Makers Do people have to sign up if they are already a DA member Coming up with the benefits Where did the name come from Does this have new benefits What has the impact been Resources Ripple Makers https://www.drupal.org/association/RippleMakers https://www.classy.org/give/386338#!/donation/checkout Drupal Certified Partner (DCP) Drupal staff page Migrate Boost 'workbench_moderation', 'pathauto', 'xmlsitemap', 'search_api', 'search_api_algolia', Guests Julia Kranzthor - JR_KThor Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Suzanne Dergacheva - evolvingweb.com pixelite MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted to disable hooks to accelerate your Drupal migration? There’s a module for that. Module name/project name: Migrate Boost Brief history How old: created in Sep 2023 by our own Nic Laflin Versions available: 1.0.1, compatible with Drupal 10 and 11 Maintainership Actively maintained Security coverage Documentation README / project page have instructions Number of open issues: none! Usage stats: 119 sites Module features and usage Having hooks fire during a migration can significantly slow down the process, and what’s worse, it can also cause some significant problems, for example sending email notifications every time a node is created You disable hooks by defining an array in your settings.php file, either an array of specific hooks you want to disable, or an array of modules for which you want to disable all hooks This was a capability available for the Drupal 7 Migrate module, but hasn’t been available in the Migrate API in Drupal core since version 8, so this module can be invaluable if you’re working on a sizable migration Hopefully there are a lot of folks working on migrations ahead of the January 5 EOL for Drupal 7, so I thought this module would be timely

Today we are talking about Drupal CMS Media Management, How media management has evolved, and Why managing our media is so important with our guest Tony Barker. We’ll also cover URL Embed as our module of the week. For show notes visit: https://www.talkingDrupal.com/479 Topics What do we mean by media management in Drupal CMS How is it different from media in Drupal today Why is media management important How are you applying these changes to Drupal What phase are you in Will this be ready for Drupal CMS release in January What types of advanced media will supported Do you see it growing to replace some DAMs Are there future goals How did you get involved How can people get involved Resources Track 15 Proposal for Media Management Issue to publish research on other CMS and the questionnaire results Vision for media management https://www.drupal.org/project/drupal_cms/issues/3488393 Contributed module file upload field for media https://www.drupal.org/project/media_widget and these related modules https://www.drupal.org/project/media_link https://www.drupal.org/project/media_remote_embed Slack: #starshot-media-management and #starshot Drupal Core strategy for 2025-2028 Guests Tony Barker - annertech.com tonypaulbarker Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Suzanne Dergacheva - evolvingweb.com pixelite MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted a simple way to insert oEmbed content on your Drupal site? There’s a module for that. Module name/project name: URL Embed Brief history How old: created in Sep 2014 by the venerable Dave Reid, though recent releases are by Mark Fullmer of the University of Texas at Austin Versions available: 2.0.0-alpha3 and 3.0.0-beta1, the latter of which works with Drupal 10.1 or 11. That said, it does declare a dependency on the Embed project, which unfortunately doesn’t yet have a Drupal 11-ready release Maintainership Actively maintained Security coverage technically, but needs a stable release Test coverage Documentation guide Number of open issues: 63 open issues, 4 of which are bugs against the current branch Usage stats: 7,088 sites Module features and usage A content creator using this module only needs to provide a URL to the content they want to embed, as the name suggests The module provides both a CKEditor plugin and a formatter for link fields. Note that you will also need to enable a provided filter plugin for any text formats where you want users to use the CKEditor button Probably the critical distinction between how this module works and other elements of the media system is that this bypasses the media library, and as such is better suited to “one off” uses of remote content like videos, social media posts, and more It’s also worth mentioning that the module provides a hook to modify the parameters that will be passed to the oEmbed host, for example to set the number of posts to return from Twitter I could definitely see this as a valuable addition to the Event Platform that we’ve talked about previously on the podcast, but the lack of a Drupal 11-ready release for the Embed module is an obvious concern. So, if any of our listeners want to take that on, it would be a valuable contribution to the community

Today we are talking about WEBAssembly, How it’s used, and cool things you can use it for with Drupal with guest Matt Glaman. We’ll also cover Darkmode JS as our module of the week. For show notes visit: https://www.talkingDrupal.com/478 Topics What is WebAssembly Progressive Web Aoos Open source Does it have a community Browser support How does it work Common use cases How can you use this with Drupal This was an early concept for Drupal trial Challenges Wordpress playground Pieces that do not work for PHP Are there risks Are there resources for people that want to use WebAssembly Do you see it being used with Drupal Resources WEBAssembly WEBAssembly history Browser support 2038 WordPress Playground https://playground.wordpress.net https://github.com/adamziel Slides from Barcelona: The Web APIs powering the Starshot trial: https://mglaman.dev/sites/default/files/2024-09/The Web APIs powering the Starshot trial experience.pdf https://www.youtube.com/watch?v=rJVM_uDGD5I&list=PLpeDXSh4nHjQOfQV-BUgoxHXlr4tHlhPO&index=64 Guests Matt Glaman - mglaman.dev mglaman Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Suzanne Dergacheva - evolvingweb.com pixelite MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted your Drupal site to provide a widget that allows visitors to go over to the dark side of your theme? There’s a module for that. Module name/project name: Darkmode JS Brief history How old: created in May 2022 by Arthur Baghdasaryan (arthur.baghdasar) of Last Call Media Versions available: 1.0.7 which works with Drupal 9, 10, and 11 Maintainership Actively maintained Security coverage Number of open issues: 1 open issues which is a bug against the current branch, but is postponed, waiting for more info Usage stats: 89 sites Module features and usage The module is a wrapper for the DarkmodeJS library which gets 1,000 weekly downloads, according to NPM. That library does have its own demo / tutorial site, so if you want to understand the options it exposes, we will add a link in the show notes The module provides options to control where on the page you want the widget to appear, what colors it should use, whether or not to store a user’s choices in cookies, and whether or not to automatically match a visitor’s OS theme setting of light/dark Installing the module currently requires making some changes to your site’s composer.json file, then configuring how you want the widget to appear, and then placing the block in your site theme The module also doesn’t currently include a schema file for its configuration, which can cause challenges particularly for sites that run automated tests

Today we are talking about being the CTO of the Drupal Association, How the job has changed, and How its impacted Drupal with guests Josh Mitchell & Tim Lehnen. We’ll also cover Automatic Anchors as our module of the week. For show notes visit: https://www.talkingDrupal.com/477 Topics How long ago were you CTO Josh Tim when did you take over DA infrastructure Drupal Credit System Josh's proudest moment Tim's proudest moment Growth Josh if you could do one thing differently Tim if you could make one change Future of the CTO job Resources OOP Hook conversion Oregon State University Open Source Lab Whuffie: Cory doctorow Down and Out in the Magic Kingdom Rethink weighing of contrib projects and credits Guests Tim Lehnen - aspenthornpress.com hestenet Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Joshua "Josh" Mitchell - joshuami.com joshuami MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted headings on your Drupal site to have unique id values, so links can be created to take users to specific parts of any page? There’s a module for that. Module name/project name: Automatic Anchors Brief history How old: created in Jun 2020 by Chris Komlenic (komlenic) of Penn State Versions available: 2.1.1-beta1, which supports Drupal 8.8, 9, and 10 Maintainership Test coverage Number of open issues: x open issues, y of which are bugs against the current branch Usage stats: 137 sites Module features and usage By default, the module automatically generates ids on , , , , and elements within the page content Even if two headings have the same content, the module will make sure their ids are unique, as well as making sure they are i18n-friendly, use hyphens instead of spaces, and are short enough to be useful The module won’t interfere with or change manually-added or already-existing HTML ids There’s a permission to view helpful links on each heading that the ids obvious and easy to copy Configuration options include the root element it should look within (defaults to the body tag), which elements should get ids, what content to use for the displayed links, and whether or not generate ids on admin pages

Today we are talking about some things are on our mind including, The DOJ Accessibility ruling,Drupal CMS Event Recipes and Tooling for core development with our Hosts. We’ll also cover @font-your-face as our module of the week. For show notes visit: https://www.talkingDrupal.com/476 Topics DOJ Accessibility Ruling Drupal CMS Tooling for core development Open University Resources Accessibility ruling PHPUnit testing https://www.drupal.org/docs/develop/automated-testing/phpunit-in-drupal/running-phpunit-javascript-tests https://github.com/ddev/ddev-selenium-standalone-chrome Drupal Events Recipes Guests Martin Anderson-Clutz - mandclu.com mandclu Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Martin Anderson-Clutz - mandclu.com mandclu Joshua "Josh" Mitchell - joshuami.com joshuami MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted to add and manage web fonts for your Drupal site, directly within the admin interface? There’s a module for that. Module name/project name: @font-your-face Brief history How old: created in May 2010 by Scott Reynen, but the most recent release was by Henrique Mendes (hmendes) of CI&T Versions available: 7.x-2.8 and 4.0.0 versions available, the latter of which support Drupal 9.4 and 10. Maintainership Actively maintained Security coverage Test coverage Documentation, but looks like it might be ready for a refresh Number of open issues: 48 open issues, 8 of which are bugs against the current branch Usage stats: 32,213 sites Module features and usage The module provides an interface to browse fonts from Google, Adobe, Typekit, and more License restrictions for fonts are clearly indicated When you find a font you want to use, you just click “enable”. You don’t need to write any CSS or define a library, and it’s easy to mix-and-match fonts from different providers. It can even make it easier to include your own local fonts The module includes submodules for the different font providers, so you enable the submodules based on where you want to use fonts from Then you can import the fonts for those providers, though you do need an API key to import fonts from Google The module does also have an API, so you can write your own modules to integrate with other font providers, or access the information about available fonts

Today we are talking about Workspaces, What They are, and How They Work with guest Scott Weston. We’ll also cover Workspaces Extra as our module of the week. For show notes visit: https://www.talkingDrupal.com/475 Topics What are Workspaces in Drupal What's a common use cases for Workspaces Are Workspaces stable Do Workspaces help with content versioning What does the module ecosystem look like for Workspaces Inspiration Workspaces best practices Any interesting ways it is being used Is there a way to access workspace content in twig Navigation integration Workspaces and workflows What aspects of a Workspace are limited to live If someone wants to get involved or get started Resources Drupal Workspaces Core issue: Media library form can only be submitted in the default workspace Integrate Navigation with Workspaces Guests Scott Weston - scott-weston Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Joshua "Josh" Mitchell - joshuami.com joshuami MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Do you want to extend the capabilities of the Workspaces system in Drupal core? There’s a module for that. Module name/project name: Workspaces Extra Brief history How old: created in Apr 2021 by Andrei Mateescu (amateescu) of tag1, who has also contributed to Workspaces in core, among other many things Versions available: 2.0.0-alpha3 which works with Drupal 10.3 or 11 Maintainership Actively maintained, latest release is less than a week old Security coverage: technically yes, but not really until it has a stable release Test coverage Number of open issues: 20 open issues, 3 of which are bugs against the current branch, though one has already been fixed Usage stats: 89 sites Module features and usage One of the big features in Drupal 10.3 was that Workspaces is now officially stable. That said, not everything works the way some site builders will want it to. That’s where a contrib solution like Workspace Extra can help to fill in the gaps It provides new options like letting you roll back changes from a published workspace, move content between workspaces, discard changes in a workspace, squashing content revisions when a workspace is published, and more Workspaces Extra, or WSE also includes a number of submodules to add even more capabilities. For example, they can allow your workspace to stage an allowlist of configuration changes, deploy workspace content using an import/export system, stage menu changes, and more. For workflow, there’s an option to generate a shareable workspace preview link for external users, and a scheduler to publish your workspace at a specific day and time I will add that the first time I played with workspaces I ran into an issue where I couldn’t create media entities within a workspace. I don’t know for sure that this hasn’t been fixed in core, but the core issue about it is still listed as “Needs work”. That said, the last comment on that issue (link in the show notes) lists WSE as something that helps, so if you encounter the same issue with Workspaces, WSE is worth a try

Today we are talking about the revolt event Loop, what it is, and why it matters with guest Alexander Varwijk. We’ll also cover IEF Complex Widget Dialog as our module of the week. For show notes visit: https://www.talkingDrupal.com/474 Topics What is an event loop Why does Drupal need an event loop What will change in core to implement this What problem does this solve Does this make Cron cleaner and long running processes faster What impact will this have on contrib How would contrib use this loop What does this mean for database compatibility What inspired this change Test instability Why Revolt Will this help with Drupal AI Resources Adopt the Revolt event loop for async task orchestration revoltphp/event-loop was added as a dependency to Drupal Core Add "EventLoop::run" to Drupal Core Migrate BigPipe and the Renderer code that's currently built with fibers Revolt Playground that shows converting some Fiber implementations from Drupal to the Event Loop DrupalCon Barcelona Talk about "Why Async Drupal a Big Deal Is" Async PHP libraries https://reactphp.org/ https://amphp.org/ Guests Alexander Varwijk - alexandervarwijk.com Kingdutch Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Joshua "Josh" Mitchell - joshuami.com joshuami MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted to use Inline Entity Forms but have the dependent form open in a dialog? There’s a module for that. Module name/project name: IEF Complex Widget Dialog Brief history How old: created in Mar 2020 by dataweb, though recent releases are by Chris Lai (chrisck), a fellow Canadian Versions available: 2.1.1 and 2.2.2, the latter or which is compatible Drupal 8.8 or newer, all the way up to Drupal 11 Maintainership Actively maintained, latest release in the past month Number of open issues: 4 open issues, none of which are bugs against the current version Usage stats: 273 sites Module features and usage When you install the module, your Inline Entity Form widget configuration will have a new checkbox, to “Enable Popup for IEF” Includes specialized handling for different kinds of entities, like nodes, users, taxonomy terms, and users Will handle not just the creation forms, but editing entities, and also duplicating or deleting entities Not something you would always need, but can be very useful if the form you want to use for entity or even parent forms that are complex I should also add that IEF supports form modes, so often I’ll create an “embedded” form mode that exposes fewer elements, for example hiding the fields for URL alias, sticky, and so on. So I would start there, but if the content creation experience still feels complex, then IEF Complex Widget Dialog might be a nice way to help

Today we are talking about Color with CSS, Sass, and bringing it all into Drupal with guest Aubrey Sambor . We’ll also cover Navigation Extra Tools as our module of the week. For show notes visit: https://www.talkingDrupal.com/473 Topics A little career background Why Front end Do you prefer JS or CSS How do colors work today in CSS Is this different from the past What is gamut Can color functions help with contrast What color functions make you the most excited Is Sass still a thing Do you use preprocessors with color functions Post CSS in Drupal Any modules you can recommend to help with CSS colros Any benefit for single directory compontents or web components Resources New England Drupal Camp Color in CSS: using new spaces, functions, and techniques to make your site shine Text wrap Gamut Do you still need Sass in 2023 Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Aubrey Sambor - star-shaped.org starshaped MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you been using the new Navigation module in Drupal core, but wanted some of the useful links previously available in the Admin Toolbar Tools submodule? There’s a module for that Module name/project name: Navigation Extra Tools Brief history How old: created in Oct 2024, less than a week ago by friend of the podcast James Shields aka lostcarpark Versions available: 1.0.0-beta3 which works with Drupal 10.3 and 11 Maintainership Actively maintained, already 3 releases Security coverage - too new, but hopefully will have in time Test coverage Number of open issues: 8 “open” issues, 4 of which are bugs, but all but one of which are now marked as fixed with the latest release Usage stats: 12 sites Module features and usage With this module enabled, the new left side Navigation menu available in Drupal core will include links to clear caches (all or a specific cache), run cron, and run database updates It’s a good example of a module that does something very specific and very useful, so I wanted to share it with our listeners as quickly as possible I know these functions are ones I’ve been missing in my own Drupal 11 dev sites, so I’m looking forward to using this module right away

Today we are talking about Access Policy API, What it does, and How you can use it with guest Kristiaan Van den Eynde. We’ll also cover Visitors as our module of the week. For show notes visit: https://www.talkingDrupal.com/472 Topics What is the Access Policy API Why does Drupal need the Access Policy API How did Drupal handle access before How does the Access Policy API interact with roles Does a module exist that shows a UI What is the difference between Policy Based Access Control (PBAC), Attribute Based Access Control (ABAC) and Role Based Access Control (RBAC) How does Access Policy API work with PBAC, ABAC and RBAC Can you apply an access policy via a recipe Is there a roadmap What was it like going through pitchburg How can people get involved Resources Access Policy API Access Policy Talking Drupal #226 Group Flexible Permissions External roles Test Super access policy Access policy talk at Drupalcon barcelona D.o Issue about exception on security issue Guests Kristiaan Van den Eynde - kristiaanvandeneynde Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Aubrey Sambor - star-shaped.org starshaped MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted a Drupal-native solution for tracking website visitors and their behavior? There’s a module for that Module name/project name: Visitors Brief history How old: created in Mar 2009 by gashev, though recent releases are by Steven Ayers (bluegeek9) Versions available: 8.x-2.19, which works with Drupal 10 and 11 Maintainership Actively maintained Security coverage Test coverage Documentation guide is available Number of open issues: 20 open issues, none of which are bugs against the 8.x branch Usage stats: Over 6,000 sites Module features and usage A benefit of using a Drupal-native solution is that you retain full ownership over your visitor data. Not sharing that data with third parties can be important for data protection regulations, as well as data privacy concerns. You also have a variety of reports you can access directly within the Drupal UI, including top pages, referrers, and more There is a submodule for geoip lookups using Maxmind, if you also want reporting on what region, country, or city your visitors hail from It provides drush commands to download a geoip database, and then update your data based on geoip lookups using that database It should be mentioned that the downside of using Drupal as your analytics solution is the potential performance impact and also a likely uptick in usage for hosts that charge based on the number of dynamic requests served

Today we are talking about Freemium Drupal Modules, The WordPress hub-bub, and Drupal, Now with AI with our hosts. We’ll also cover FullCalendar as our module of the week. For show notes visit: https://www.talkingDrupal.com/471 Topics Freemium Drupal Wordpress controversy Drupal CMS and AI Resources Dries Wordpress Blog Post Non-Code Contribution: Using your passion and skills to power open source. DrupalCon Barcelona Driesnote Drupal AI Guests Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Aubrey Sambor - star-shaped.org starshaped Martin Anderson-Clutz - mandclu.com mandclu MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted an interactive calendar to display your Drupal events with drag-and-drop rescheduling, and without using jQuery? There’s a module for that. Module name/project name: FullCalendar Brief history How old: created in Sep 2010 by ablondeau, though I’ve been behind the most recent releases Versions available: 7.x-2.0 and 3.0.0-beta2 versions available, the latter of which supports Drupal 10 and 11 Maintainership Actively maintained, latest release was this morning Security coverage, though technically the 3.0.x branch will have it once it’s stable Test coverage, minimal but on the roadmap Documentation - does have a user guide, but created for the D7 version, so newer documentation is needed Number of open issues: 337 open issues, none of which are bugs against the 3.0.x branch Usage stats: 3,388 sites, though the vast majority of those are for the D7 version, since the 3.0.x branch is very new Module features and usage No jQuery! Lots of configurability plus some extras specifically for Drupal Drag-and-drop to alter events Option to require confirmation Can display toast-style notifications when updates are save Double-click on a day or time to create an event at that time Can display events from different content types, even if they use different fields to store dates, and yes, even different kinds of fields, so a mixture of core and Smart Date fields will work You can set default colors and output type (block or the newer, list-item display), and the ability to override color based on content type or a taxonomy reference This module had been essentially dormant for over 4 years, but I decided to work with Jürgen Haas on reviving it after a similar and popular project called Fullcalendar View was not only marked as “Minimally maintained” and “Maintenance fixes only”, but the project page directed users to contact the maintainer to pay for a premium version, in order to use the current version of the Fullcalendar JS library, or to load events via AJAX, which as been an often-requested feature because Fullcalendar View has had common reports of performance problems on sites with lots of event data. Worse, the maintainer has closed as “won’t fix” issues that had community-provided patches, because he only wanted to provide said improvements in the paid, premium version In my work on the Events recipe for Drupal CMS, I knew that having a solid calendar would be important, and I didn’t feel good about relying on a module that seemed to be pushing users more and more towards a paid model. I’m grateful to Jurgen and everyone who worked on FullCalendar before us for creating such a robust and extensible code base