Thanks, Andrew - I think I'll implement the current version of Masquerade for the moment (great module, btw - I use it on all of my dev sites) and then work on integrating this functionality in a patch when I've got more time - will allow me to learn more about Drupal security, too. Masquerade is a "brand" module in my view so there's really no need to fork it.

--Jim
--
My IM and Skype details are at http://state68.com/contact


On 9 August 2010 18:56, Andrew Berry <andrewberry@sentex.net> wrote:
On 2010-08-09, at 12:48 PM, James Benstead wrote:

> Thanks - both of these modules solve half of the problem (i.e., the switching part) - but neither seem to allow me to force the user to enter the root password in order to switch to the root account.

I think sudo's method of entering your own password, rather than the root password, makes the most sense. I'd consider accepting patches against Masquerade that require re-authentication before switching. If you decide to go that way, please file an issue over in the queue.

--Andrew