More in this section

Forums / Developing with Sitefinity / Newsletter module permissions - how do I hide it from users?

Newsletter module permissions - how do I hide it from users?

4 posts, 0 answered
  1. Marko
    Marko avatar
    148 posts
    Registered:
    30 Jul 2008
    05 Aug 2008
    Link to this post
    I just installed Sitefinity 3.2 Standard - Trial, so this issue might just be my lack of knowledge of the system.  But here's what's going on:

    - system installed out-of-the-box
    - created a new project using no template
    - created 2 new user roles
    - assigned few sample users to each of the roles
    - gave one of the roles CMS access permissions

    Now, when I log in as that sample user, I'm expecting NOT to see much in my dashboard, since I don't have any permissions other than CMS access.  Well, it turns out I can see the "Modules" tab, and in it, the Newsletters module.  I can create/manage subscriber groups and other things about the newsletters as if I were an Admin user.

    Back when I was logged in as Admin, I didn't even see a "permissions" option for the newsletters, but all other Modules seem to have it.

    What's going on?

    Thanks!
  2. Rebecca
    Rebecca avatar
    536 posts
    Registered:
    24 Sep 2012
    05 Aug 2008
    Link to this post
    Hi Marko,

    Yes, a user with CMS access permission granted will always see the module.You are right this is not at all conevnient and we are already working on permissions for the Newletters module. This functionality will definitely make it into the next Sitefinity release.

    The only possibility for the time being is to disable the module altogether. Open the application web.config.file, and in section <modules>, remove the highlighted line:

          <modules>
            <add type="Telerik.Cms.Engine.GenericContentModule, Telerik.Cms.Engine" />
            <add type="Telerik.News.NewsModule, Telerik.News" />
            <add type="Telerik.Blogs.BlogsModule, Telerik.Blogs" />
            <add type="Telerik.Lists.ListModule, Telerik.Lists" />
            <add type="Telerik.Polls.PollModule, Telerik.Polls" />
            <add type="Telerik.Forums.ForumsModule, Telerik.Forums" />
            <add type="Telerik.Libraries.LibrariesModule, Telerik.Libraries" />
            <add type="Telerik.Events.EventsModule, Telerik.Events" />
            <add type="Telerik.Notifications.Newsletters.NewsletterModule, Telerik.Notifications" />
          </modules>

    Do let us know if you need any further assistance.

    Rebecca
    the Telerik team

    Check out Telerik Trainer, the state of the art learning tool for Telerik products.
  3. Marko
    Marko avatar
    148 posts
    Registered:
    30 Jul 2008
    05 Aug 2008
    Link to this post
    Thanks Rebecca!  I appreciate the quick response!

    I tried removing that line from web.config, and it seems to have worked.  I suppose I would prefer not using Newsletters module entirely if I can't have enough control over it.  Thanks for the tip.

    In a somewhat related situation, though... I looked at all other modules to make sure I can control all of their permissions, and I noticed something odd with the EVENTS module.  Unline Newsletters, Events module does have a "permissions" option.  However, it seems to have a bug of some sort.  Here's what happens:

    I go to Modules and click on Events.  In the left sidebar, underneath Events Settings, I see "Permissions" link (under which it says "Define who is allowed to read, edit and delete Events").  First thing that's a bit odd about it is that "Permissions" link is the only link in the left sidebar that's NOT bold (makes me think there's something different about it(???).  But more importantly, when I click on it, I end up on a page that says "Set Permissions for Generic Content."  However, in the breadcrumb just above it, it displays Events > Permissions (which would be correct).

    And when I actually SET the permissions on this page, it DOES seem to control the events permissions, in fact.  So the bug may only be of visual nature, the fact that it displays "Set Permissions for Generic Content" when it should read "Set Permissions for Events."

    Anybody else see the same thing in their installation?
  4. Rebecca
    Rebecca avatar
    536 posts
    Registered:
    24 Sep 2012
    06 Aug 2008
    Link to this post
    Hi Marko,

    Thanks for drawing our attention to these inconsistencies. We'll get them fixed for the upcoming release.
    They are not critical for the functioning of the Evnets module permissions as you have noticed.

    Your Telerik account has been updated.

    Please let us know if there is something else we can assist you with.

    Sincerely yours,
    Rebecca
    the Telerik team

    Check out Telerik Trainer, the state of the art learning tool for Telerik products.
Register for webinar
4 posts, 0 answered