Try Now
More in this section

Forums / Bugs & Issues / News, Permissions and manually typed urls

News, Permissions and manually typed urls

2 posts, 0 answered
  1. Matteo
    Matteo avatar
    1 posts
    02 Jul 2008
    04 Jan 2011
    Link to this post

    A client of mine just spotted something the looks like an glitch/bug to me.
    On the website I have a password protected area (which is working fine) which contains a page with a news control sitting on it. If i try accessing the exact URLs for the news in that are in the protected area, everything works as expected.

    There is also a public page on the website the contains news. Please note that:

    1) i have double checked permissions
    2) categories are correctly set on the news controls and on the pages

    Basically, if a user types in the name of the news item that should be protected in the URL (the one that's automatically generated by SF) on the unprotected page, the full news is displayed anyway.

    I'll make an example to be clearer:

    Protected URL: http://www.someurl.com/extranet/news/10-11-17/protected_news_item.aspx
    Unprotected URL: http://www.someurl.com/media/news/10-11-17/protected_news_item.aspx

    In the first case the user is correctly redirected to the login screen. In The second example, the user is displayed the news without authentication required. Also, the second case is displaying a piece of news even if it doesn't belong to the categories specified in the filters for the control.

    The version of SF is 3.2

    Can you please shed some light on the matter?
    thanks in advance!

    Kind Regards,
  2. Radoslav Georgiev
    Radoslav Georgiev avatar
    3370 posts
    01 Feb 2016
    04 Jan 2011
    Link to this post
    Hello Matteo,

    Thank you for using our services.

    This is not possible out of the box with Sitefinity 3.x versions. The permissions are applied for news module so that you define which administrative users can create/modify/delete news items. However you might find this blog post useful. Instead of hiding the whole control as described in the blog post you can redirect to a login page.

    Best wishes,
    Radoslav Georgiev
    the Telerik team
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
2 posts, 0 answered