1-888-365-2779
+1-888-365-2779
Try Now
More in this section

Forums / Developing with Sitefinity / Private Pages, Roles: Best Solutions

Private Pages, Roles: Best Solutions

4 posts, 0 answered
  1. Pierre
    Pierre avatar
    433 posts
    Registered:
    16 Feb 2006
    12 Mar 2009
    Link to this post
    Hi,

    I'm searching to create private pages. These pages are limited to admin and the userName. One solution is create custom Roles=username, but that will generate a big confusion in admin user panels, so many Roles. I'm searched other solution like store the private page in profile and use one generical Role=Private, after one method to have 3 levels of security and redirects and controls based on Roles and usernames; but in this case the other users from same Role can see these page throw the admin/Pages panel and hidde the pages using normal way like autorizations view deny block the pages public side because the generic Role need allow in view.
    I have read some solution for creating one CustomSiteMap and in this way hidde the items based on Roles or userNames public side.
    What about SiteMapControl in Admin/Pages/Map? could you sugest some modifications to hide some pages based one Roles/username.
    What are the better solutions to manage private pages by username using a limited number of Roles? (not for future version, for v3!).
    or is Role by User the best solution?

    Thanks.
  2. Dido
    Dido avatar
    149 posts
    Registered:
    24 Sep 2012
    12 Mar 2009
    Link to this post
    Hi Pierre,

    The classic approach would be to create a group, and assign all users to it. Then, you would make only users from this group to be able to see the pages in question. This is not confusing, because it is the approach *nix systems have been using for decades. Being able to add more users with the same privileges is a good thing, not the other way around.

    You could use some sort of an OO approach here:
    1. Break up the pages that should go private in the tiniest possible groups.
    2. Set the following View permissions for every page in those groups:
      1. "everyone" -> "deny"
      2. "owner -> "allow"
      3. "<your_specific_group_name>" -> "allow"
    3. Set "Anonymous Access" to "Deny" (Page->Properties) for every private page
    4. Make your users belong to the roles that describe their needs best. That way they will "inherit" the appropriate rights. Have in mind that "Deny" weighs more than "Allow", that is if a user belongs to two conflicting roles, "Deny" will be used for the user.

    Setting pages' permissions are designed to be used in such scenarios.

    Greetings,
    Dido
    the Telerik team

    Instantly find answers to your questions on the new Telerik Support Portal.
    Check out the tips for optimizing your support resource searches.
  3. Pierre
    Pierre avatar
    433 posts
    Registered:
    16 Feb 2006
    12 Mar 2009
    Link to this post

    I Dido,

    Not woking as need. sample Role=Private, and one VeryPrivatePage 

    User1 in PrivateRole, User2 in PrivateRole everyone need one PrivatePage not same, user1 not must see user2, user2 not see user1.

    For VeryPrivate1 Page, Breakin heritance, Deny anomimous, Everyone=Deny PrivateRole=Allow. I can't see the page public side, the page is not served to user1 or user2 ( everyone set to deny is strong that PrivateRole allow), and user1 can see PrivatePage2 from user2 in Admin/Pages/Map. The pages are not protected for user from same Role. That is the problem. Regards

     

     

     

     

  4. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    16 Jun 2017
    13 Mar 2009
    Link to this post
    Hello Pierre,

    "The pages are not protected for user from same Role."

    You cannot hide this page from other users. Permissions are based on Roles. You can set some restriction over this role and then use item ownership of the user, but in this way only the user that has created this page will have access to it.


    Kind regards,
    Ivan Dimitrov
    the Telerik team

    Instantly find answers to your questions on the new Telerik Support Portal.
    Check out the tips for optimizing your support resource searches.
Register for webinar
4 posts, 0 answered