1-888-365-2779
+1-888-365-2779
Try Now
More in this section

Forums / General Discussions / Page Permission Issue

Page Permission Issue

11 posts, 1 answered
  1. JV
    JV avatar
    74 posts
    Registered:
    15 Jun 2012
    26 Oct 2010
    Link to this post

    Hi,

    I created on page and give vew permissions to one specific role (i removed "everyone").

    First problem/question
    When not authenticated the page appears in the navigation menu. When i click i get the "The page cannot be found". It seams to be an error. I will like to say that I made the manual install of sitefinity so i don't now if is something missing.

    Second problem/question
    I try to configure on login without access to the backend. I put it in the Role that is associated to the page. When i try to login with that user a receive the message :

        "You do not have the permissions to access this page. Try using other credentials or contact the administrator.

        You were automatically navigated form "/sitefinity" because you are not authorized to access that page!

        What do you want to do? "

     It sounds logic because i enter the login in the backend login page. But in this Sitefinity version doesn't exists the logins controls/widgets. Are they planned to the release candidate ?

  2. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    16 Jun 2017
    26 Oct 2010
    Link to this post
    Hello Joana,

    When not authenticated the page appears in the navigation menu. When i click i get the "The page cannot be found". It seams to be an error. I will like to say that I made the manual install of sitefinity so i don't now if is something missing.


    You could see this behavior if you have set denied View rights for an anonymous user.

    It sounds logic because i enter the login in the backend login page. But in this Sitefinity version doesn't exists the logins controls/widgets. Are they planned to the release candidate ?


    You could take a look at this post.

    Regards,
    Ivan Dimitrov
    the Telerik team
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  3. JV
    JV avatar
    74 posts
    Registered:
    15 Jun 2012
    26 Oct 2010
    Link to this post
    Hi,

    "
    When not authenticated the page appears in the navigation menu. When i click i get the "The page cannot be found". It seams to be an error. I will like to say that I made the manual install of sitefinity so i don't now if is something missing.

    You could see this behavior if you have set denied View rights for an anonymous user.
    "
    Yes i set denied view rights but i expect that:

    - when if i try to reach that page by url injection i receive a "not allowed" error

    And

    - in the navigation menu the link to the page shouldn't appear since the anonymous doesn't have access to it.

    What i mean is that  i shouldn't see that page in the naviagation control .
  4. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    16 Jun 2017
    26 Oct 2010
    Link to this post
    Hi Developer,

    We are working on these features. The problem comes from ASP.NET SiteMap provider and we have to extend it.

    Greetings,
    Ivan Dimitrov
    the Telerik team
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
    Answered
  5. Andrei
    Andrei avatar
    553 posts
    Registered:
    27 Nov 2008
    19 Nov 2010
    Link to this post
    Ivan,

    I have downloaded the Sitefinity 4.0 RC (Build: 4.0.907.0) and getting the same issue. If I decide do deny View permission to everyone but the Admin users, the page comes up with the Resource not found message. 

    My expectation was the same:
    Either take it away from the Site Menu
    OR
    Display an Access Denied message (Preferable, in case someone decides to add a hyper-link to a restricted page). Maybe a Login control on the Access Denied page might help.

    I am glad you are already looking into it and will be awaiting your update on it.

    Many thanks,
    Andrei
  6. JV
    JV avatar
    74 posts
    Registered:
    15 Jun 2012
    23 Nov 2010
    Link to this post
    Hi,

    The problem persist in RC. what about the final release ? These feature will bo OK ?
  7. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    16 Jun 2017
    23 Nov 2010
    Link to this post
    Hi JV,

    We will add implementation to the SiteMap that will return correct status code if you do not have permissions for a given page for the official release. We were focused on Workflow and Localization for the RC which are main features and we did not manage to make changes to the SiteMap.

    Greetings,
    Ivan Dimitrov
    the Telerik team
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  8. Bes
    Bes avatar
    8 posts
    Registered:
    15 Oct 2010
    24 Nov 2010
    Link to this post
    Hi,

    I have the same problem, like the rest in RC 4-0-910-0.
    But I believe that if a user is not allowed to see a certain page, the menu item must not be shown.
    That way you can keep the menu clean, and show only those options that are of interest of that specific user.

    I hope that his feature will exist in the final version?
    Or what will be a work arround?

    Thanks
  9. Andrei
    Andrei avatar
    553 posts
    Registered:
    27 Nov 2008
    25 Nov 2010
    Link to this post
    I agree that it should be taken off the Menu Strip, but for those 'Smart Ones' that think they can circumvent it by accessing it directly by entering via the URL address, I think the page should still display a 'Access Denied' message.

    Andrei
  10. Bes
    Bes avatar
    8 posts
    Registered:
    15 Oct 2010
    25 Nov 2010
    Link to this post
    Andrei I agree with you!
  11. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    16 Jun 2017
    25 Nov 2010
    Link to this post
    Hello Bes,

    Yes, this is a bug that we have logged for fixing. When an authenticated user does not have view permissions he/she should not see this page in the tab. The same applies if you are "anonymous" user.

    All the best,
    Ivan Dimitrov
    the Telerik team
    Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
11 posts, 1 answered