Thanks, Andrew - I think I'll implement the current version of Masquerade for the moment (great module, btw - I use it on all of my dev sites) and then work on integrating this functionality in a patch when I've got more time - will allow me to learn more about Drupal security, too. Masquerade is a "brand" module in my view so there's really no need to fork it.<div>
<br clear="all">--Jim<br>--<br>My IM and Skype details are at <a href="http://state68.com/contact">http://state68.com/contact</a><br>
<br><br><div class="gmail_quote">On 9 August 2010 18:56, Andrew Berry <span dir="ltr"><<a href="mailto:andrewberry@sentex.net">andrewberry@sentex.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On 2010-08-09, at 12:48 PM, James Benstead wrote:<br>
<br>
> Thanks - both of these modules solve half of the problem (i.e., the switching part) - but neither seem to allow me to force the user to enter the root password in order to switch to the root account.<br>
<br>
</div>I think sudo's method of entering your own password, rather than the root password, makes the most sense. I'd consider accepting patches against Masquerade that require re-authentication before switching. If you decide to go that way, please file an issue over in the queue.<br>
<font color="#888888"><br>
--Andrew</font></blockquote></div><br></div>