A customer of ours asked if it is possible to fix the account they are using in the sitecore backend (Experience Editor, Centent ediror, Media library, ...) to only the master database. Our accounts should still be able to access the web, but theirs shouldn't
-
Remove read access to the database switcher maybe? stackoverflow.com/a/17565265/661447– jammykamDec 14, 2016 at 10:03
-
1Do they also want to restrict who can publish to web?– Dmytro ShevchenkoDec 14, 2016 at 10:09
-
No, they must still be able to publish, just remove the possibility to switch (to avoid making changes in the wrong database)– RikDec 14, 2016 at 12:37
-
1Even if the switcher is removed, you could still alter the URL and gain access that way. You're going to need a custom request pipeline component after the database context is resolved to check security roles and enforce the rules. I reckon a profile switch ought to do the job, or a role group.– Richard HauerDec 14, 2016 at 13:20
Add a comment
|
2 Answers
Long shot.. can you try disabling access to below item in core db for the user role and verify if this solves your problem.
I have followed the following steps to remove database switcher for particular account.
- Login to Sitecore.
- Go to the desktop. Select core database.
- Go back to Launchpad.
- Go to Security Editor.
- Select the appropriate account on top.
- In content tree, go to content->Applications->Desktop->Tray->Database
- Select Denied access (x) on read.
It will remove the database switcher for a particular account while it will show for other accounts. Look at the screenshot below.
.
answered Dec 16, 2016 at 12:15
