1-888-365-2779
+1-888-365-2779
Try Now
More in this section

Forums / Developing with Sitefinity / Permissions - Changing Allow Before Deny priority

Permissions - Changing Allow Before Deny priority

4 posts, 0 answered
  1. MNP
    MNP avatar
    79 posts
    Registered:
    23 Apr 2008
    26 Nov 2009
    Link to this post
    In our internal application, we use AD Roles for security. We've come across a situation where that certain roles have access to create news, and others have access to approve them.

    The problem is that the users in the Approvers role are also in the Contributors role. Searching on the forum, it looks like the Deny is a higher priority over Allow, thus not allowing the users in the Approvers role to Approve Items if they are also in the Contributors group.

    Is there a way to switch the priority around so that Allow is higher then Deny.

    Thanks

    -Matt
  2. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    16 Jun 2017
    26 Nov 2009
    Link to this post
    Hi Matt,

    You are right - Deny has higher priority than Allow. Unfortunately it is not possible to change the permissions priority. Try using only one role for Approvers if possible.

    Best wishes,
    Ivan Dimitrov
    the Telerik team

    Instantly find answers to your questions on the new Telerik Support Portal.
    Watch a video on how to optimize your support resource searches and check out more tips on the blogs.
  3. MNP
    MNP avatar
    79 posts
    Registered:
    23 Apr 2008
    26 Nov 2009
    Link to this post
    I thought so. Can I make a suggestion that we have the ability to switch the priority. I can see why you want to have deny first - better to not have permission then to give too much.

    Thanks keep up the good work.
  4. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    16 Jun 2017
    27 Nov 2009
    Link to this post
    Hi Matt,

    The permissions will be extended for Sitefinity 4.0 and there will be more flexibility. Unfortunately there is no way to have allow with higher priority than deny. This is in the base permission implementation.

    Sincerely yours,
    Ivan Dimitrov
    the Telerik team

    Instantly find answers to your questions on the new Telerik Support Portal.
    Watch a video on how to optimize your support resource searches and check out more tips on the blogs.
Register for webinar
4 posts, 0 answered