+1-888-365-2779
Try Now
More in this section

Forums / Suggestions / Permissions on this and that!

Permissions on this and that!

9 posts, 0 answered
  1. UI Crew
    UI Crew avatar
    151 posts
    Registered:
    27 Sep 2012
    09 Nov 2007
    Link to this post
    Hi,

    Working with a fairly large orgainsation over the last month or so has highlighted the need for a few extra "permissions" wish I hope you will consider for upcoming releases:

    • Blogs - as you can have multiple bloggers in the blog module it occurred to me that you can not, as far as I can see, give permissions to a user to create, view drafts and edit their blog but no one else's? At the moment a person with permission to blogs can place a post in anyones blog.

    Also I think it would be good to be able to place the create/edit blog controls actually in the website as well as admin eg. a admin person creates a blog for a user but the user logs into the site and creates posts for that blog actually in the pages of the website so they don't have to go near Sitefinity admin. After all you might have many bloggers that need no other CMS functions bar adding posts?

    Templates - be great if you could assign permissions for a cms user to only be able to pick certain page templates when they are creating a page. eg hide some templates from some users. If you have a large site with many different sections the list of templates could be quite large if you are trying to control the layout as much as possible and make it easier for content managers. So to be able to cutomise the list of templates the user can use would be very powerful.

    Toolbox Controls - it would be again great if you could somehow control what items appear in a users toolbox. eg. we try to create page templates so that a standard cms user doesn't have to think about setting navigation controls up. They just create the page, choose a template and add generic content and the templates sort out the naigation for them. In that case we don't want them to be abe to drop nav controls into the page we would only want a standard user to have access to generic content, hyperlink, image controls to choose from but then a higher user might also have a few more powerful ones and then a administrator access to all toolbox controls.

    Controlling access to the file system - it worried our client that when a user went to upload a image or doc they could potentially put it anywhere eg. upload for images wasn't confined to the images directory in news. However one great plus about using the telerik active directory provider was that a user without the neccessary AD permisions on a folder couldn't upload to it and got a windows password prompt which meant they had to ask someone else to put in there username/password. this doesn't work out on the web though.

    thanks Seth



  2. Gabe Sumner
    Gabe Sumner avatar
    440 posts
    Registered:
    09 Sep 2007
    09 Nov 2007
    Link to this post
    I am going to hijack Seth's thread and add a few of my own thoughts. 

    Blogs - Also I think it would be good to be able to place the create/edit blog controls actually in the website as well as admin eg. a admin person creates a blog for a user but the user logs into the site and creates posts for that blog actually in the pages of the website so they don't have to go near Sitefinity admin.

    I'm going to bump this up a notch.  Being able to quickly toggle into and out of "Edit" mode for any given Sitefinity page would be awesome.  You can kind of do this by creating a link to the current page and adding "?cmspagemode=edit" to the end of the URL.

    Example: http://www.goondocks.com/testpage.aspx?cmspagemode=edit

    This will toss you directly into the Sitefinity "Edit Mode" for that page.  This doesn't work for Blogs, but it's useful for Pages.  You can also use the RoleProvider to show or hide the "Edit" link on the Page as needed.

    Templates - be great if you could assign permissions for a cms user to only be able to pick certain page templates when they are creating a page. eg hide some templates from some users.

    I would personally like to be able bypass the template selection screen entirely.  I have ONE template and ONE theme I want users to use.  There is no need for them to see this template selection screen.

    Controlling access to the file system - it worried our client that when a user went to upload a image or doc they could potentially put it anywhere

    I already stood on my soapbox about the "file management" issue:

    http://www.sitefinity.com/support/forums/support-forum-thread/b1043S-baakke.aspx

    I hate when typical users are required to do file management!  Anytime I have required "typical" users to do this, it has turned into a mess.  To deal with this I started building web interfaces that accept a file and automatically handle where it gets stored and how it gets referenced.  My life has been happier because of this.  :)

    File management is evil!  Web applications that are intended for typical users should never ever ever EVER require it.  EVER!!! 

    I don't really have any strong opinions on this subject though.  :)

    Good thoughts Seth!

    Gabe
    ==============
  3. Vlad
    Vlad avatar
    498 posts
    Registered:
    15 Jul 2016
    12 Nov 2007
    Link to this post
    Hello Seth and Gabe,

    Thank you very match for the suggestions.
    We will definitely consider them when improving the modules you mention.

    Blogs
    Seth, you are right, it's good to have permissions for a single item (e.g Blog item,  Forum item, ...). As for the public controls for creating/editing Blogs, we will hopefully provide some soon.

    Gabe, you have found a good solution with adding "?cmspagemode=edit" to the end of the URL, but as you said, it is working only for pages.

    Templates
    Currently, you can hide the templates section for the user, if you set deny "Edit Templates" permission in Administation->Permissions section. We will consider improving templates permissions in the future.

    Toolbox controls
    Yes, we have plans to add something similar in Sitefinity, but we have not decided yet how it will be accomplished - maybe with security policies or user personalizations, or both.

    Controlling access to the file system
    Currently, we have no plans to improve the File Manager, but we will provide Document Manager and Media Manager modules, which will handle uploading documents, images and other files.

    Greetings,
    Vlad
    the Telerik team

    Instantly find answers to your questions at the new Telerik Support Center
  4. Shawn Clabough
    Shawn Clabough avatar
    7 posts
    Registered:
    01 Jun 2004
    20 Dec 2007
    Link to this post
    Toolbox Controls - it would be again great if you could somehow control what items appear in a users toolbox. eg. we try to create page templates so that a standard cms user doesn't have to think about setting navigation controls up. They just create the page, choose a template and add generic content and the templates sort out the naigation for them. In that case we don't want them to be abe to drop nav controls into the page we would only want a standard user to have access to generic content, hyperlink, image controls to choose from but then a higher user might also have a few more powerful ones and then a administrator access to all toolbox controls.

    I'm going to add my name to the list of this being a high priority.  We are currently evaluating Sitefinity and this is a big requirement in our system.  The decision whether this is a show-stopper or not has not been made, but our system needs to be able to hide (by role) any items that someone should not have access to.  Any chance that this will be possible prior to 4.0?
  5. Pepi
    Pepi avatar
    981 posts
    Registered:
    08 Dec 2016
    21 Dec 2007
    Link to this post
    Hello Shawn,

    Thanks a lot for your extended feedback on this matter. Our purpose is to make the product better and your input is highly appreciated. As it is already mentioned in the previous post, we have plans to provide such functionality in Sitefinity but we are still in the process of researching what is the best approach to implement this.  

    Greetings,
    Pepi
    the Telerik team

    Instantly find answers to your questions at the new Telerik Support Center
  6. Shawn Clabough
    Shawn Clabough avatar
    7 posts
    Registered:
    01 Jun 2004
    03 Jan 2008
    Link to this post
    Thanks.  We're really trying to figure out how we can make Sitefinity work for us because we've been very satisfied with the support and improvments to the RAD tools we've used over the years.

    In the short-term - until you implement a solution - is there a way to override the existing toolbox and implement our own?
  7. Pepi
    Pepi avatar
    981 posts
    Registered:
    08 Dec 2016
    07 Jan 2008
    Link to this post
    Hi Shawn,

    Unfortunately, there is no way to override and extend the Toolbox controls for now. Currently, we are working on a module that will provide the required functionality in the future.

    We are sorry for the inconvenience caused.

    Greetings,
    Pepi
    the Telerik team

    Instantly find answers to your questions at the new Telerik Support Center
  8. briankb
    briankb avatar
    56 posts
    Registered:
    23 Feb 2004
    12 Feb 2008
    Link to this post
    I was about to ask this same question. We need to hide the login controls as it is just going to confuse our end users. Who may consider the login control int he control panel the same as the static html login we HAVE to put in the master pages.

    Is there a workaround of anykind for this?
  9. Nikifor
    Nikifor avatar
    232 posts
    Registered:
    18 May 2013
    13 Feb 2008
    Link to this post
    Hi Briankb,

    All controls displayed in the Toolbox of the UI are defined in the web.config file of the website. This means that if you want to remove any of them, you should delete the information about them from the configuration file. 

    If your desire is to hide the Login controls, you should delete the following lines from the <toolboxControls> section (these are all controls that are available in the Login section in the Toolbox):
     
     <add name="Login Status" section="Login" type="System.Web.UI.WebControls.LoginStatus, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" 
              description="Detects the user's authentication state and toggles the state of a link to log in to or log out of a Web site." /> 
     <add name="Login Name" section="Login" type="System.Web.UI.WebControls.LoginName, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" 
              description="Displays the value of the System.Web.UI.Page.User.Identity.Name property." /> 
     <add name="Login" section="Login" url="~/Sitefinity/UserControls/Login/LoginControl.ascx" 
              description="Provides user interface (UI) elements for logging in to a Web site." /> 
     <add name="Manage Profile" section="Login" type="Telerik.Security.WebControls.ManageProfile, Telerik.Security" 
              description="Provides UI for managing user's profile information" /> 
     <add name="Login View" section="Login" url="~/Sitefinity/UserControls/Login/LoginViewControl.ascx" 
              description="Displays the appropriate content template for a given user, based on the user's authentication status and role membership." /> 
     <add name="Create User" section="Login" url="~/Sitefinity/UserControls/Login/CreateUserWizardControl.ascx" 
              description="Provides a user interface for creating new Web site user accounts." /> 

    Hope the provided information is helpful. Please do not hesitate to contact us for any further questions.

    Regards,
    Nikifor Hristov
    the Telerik team

    Instantly find answers to your questions at the new Telerik Support Center
Register for webinar
9 posts, 0 answered