Support Forum Thread

Home > Support > Forums home > Sitefinity 3.x > General comments > Page permissions not working

susan, 7/1/2008 6:08:35 PM

I am working on a site that includes a handful of pages that can only be accessed by people who we have given the roll of members, to view these pages a member must be logged in.

In Adminstration the role of everyone is set to deny all options.

In the SiteMap the parent page is set to allow access to "everyone"

The pages that we want only members to access have been set up so that the inheit permissions has been broken and the permission setting for member is view/allow, the permission setting for "everyone" is set to view/deny.

However, when a random visitor goes to the page we have set up with the permission listed above they are CAN view the page.

So with the permissions for everyone set to deny - why are they allowed to view the pages? Am I missing something?

On strange thing we see is that the View option for Allow has a check in the box and the word Allow is black, right across from it there is also a check mark in the Deny box but the word Deny is greyed out....

J, 7/2/2008 12:30:27 PM

Hi everyone,

Might be the right place to post my Page Permission problem :)

We have set up a Sitefinity 3.2 site (with no service pack) and our client starts working with permissions. She has two roles that she want to be able to access two different pages. So that a page named PA is accessible by a RA role only and a PB page with the RB role only.

For that, we have :
- broken the page inheritance
- set the role Everyone on the PA page to deny for all permissions, except for View.
- set the View permission for the RA role to View: Allow for the PA page.
- set the Anonymous access to deny for this PA page.

It seems it is the right way to allow the PA page only to the RA role, but it does not work.

When I am not connected (anonymous) and if I try to reach the PA page, I'm prompted to log in. Nice. So I log in as a user who is a member of the RB role.

Problem: I can have access to the PA page with the RB role.

I was looking for someone having the same problem, but I did not found anybody. So is there anyone who is familiar with permissions ? Is it a known bug ? A little help would be greatly apprciated ;)

susan, 7/2/2008 12:43:48 PM

The new question above just reminded me that I forgot to mention something...

-- if we set the page to Anonymous access/deny the links to the pages do not show up in the navigation bar which -- they only show up if you are logged in as a member - this is not an acceptable solution -- the links must be there so anonymous (read potention members) can see the wealth of information that is offered via the site.

Jason M, 7/4/2008 12:51:15 PM

Are you using a custom login page? If so...I experienced the same issue. There's a solution in the last 2 threads of this post:
http://www.sitefinity.com/support/forums/support-forum-thread/b1043S-bdghbt.aspx

Some more information in this post:
http://www.sitefinity.com/support/forums/support-forum-thread/b1043S-bdtgth.aspx

Let me know if this worked for you.
J

susan, 7/4/2008 4:36:31 PM

Hi Jason thanks for the links, the first one was hard to follow... but the second one was close to the problem I'm having, I do have a custom login page.

But generally speaking if a navigation link is set to Annoymous Deny, Everyone View Allow -- then the link "should" show up in the navigation -- and if clicked an authentication screen (in this case my login screen) should be displayed. Right?

If not then how do I get a link in the navigation that everyone can see but if clicked only allow access to users with passwords?

thanks.

susan, 7/4/2008 4:59:22 PM

For clarity ---- I actually meant "anyone" ----

How do I get a link in the navigation that "anyone" visiting the site can see but if they click on the link they get my custom login screen asking for a password?

Jason M, 7/7/2008 1:42:14 PM

The "deny anonymous" setting trumps the allow everyone rights. In this case, I think you this KB article is what you're looking for. It allows you to create a custom sitemap provider and show all links:

http://www.sitefinity.com/support/knowledge-base/kb-article/b1154K-heh-b1154T-ctt.aspx

J

J, 7/8/2008 11:02:11 AM

Thanks for the links Jason, the second has answered my question.

In his post, Matt gives the solution (Matt, 5/15/2008 10:50:14 AM), which was not so obvious to me. Two lines of code were "missing".

Thanks again ;)

, 7/15/2008 10:11:51 AM

Hello Jason,

Thank you for providing a link to the solution of another community member, Susan. We updated your Telerik points.

Kind regards,
Sonya
the Telerik team

Instantly find answers to your questions at the new Telerik Support Center

a product by telerik

Sitefinity ASP.NET CMS - Content Management System

Support Forum Thread