1-888-365-2779
+1-888-365-2779
Try Now
More in this section

Forums / Bugs & Issues / Forums Service Security

Forums Service Security

2 posts, 0 answered
  1. Kristian
    Kristian avatar
    214 posts
    Registered:
    03 Jun 2010
    22 May 2012
    Link to this post
    Seems like permissions don't work correctly when using the service url for the forums module.
    I have one forum group called moderators that I set permissions to moderators only for everything. The page with the widget shows the forums correctly, moderators group is hidden for non moderators and they can see all forums that are public

    However typing in the service url /Sitefinity/Services/ForumsService.svc/ will show all forum groups if your logged in as a moderator or not. :(

    filterQueriesByViewPermissions is also set to true...
  2. Kristian
    Kristian avatar
    214 posts
    Registered:
    03 Jun 2010
    05 Jun 2012
    Link to this post
    Do i not understand the way permissions work, shouldn't permissions applied to a forum item also be applied to the exposed json service?

    What about other SF modules, images, docs, etc?
2 posts, 0 answered