5

A customer of ours asked if it is possible to fix the account they are using in the sitecore backend (Experience Editor, Centent ediror, Media library, ...) to only the master database. Our accounts should still be able to access the web, but theirs shouldn't

4
  • Remove read access to the database switcher maybe? stackoverflow.com/a/17565265/661447 – jammykam Dec 14 '16 at 10:03
  • 1
    Do they also want to restrict who can publish to web? – Dmytro Shevchenko Dec 14 '16 at 10:09
  • No, they must still be able to publish, just remove the possibility to switch (to avoid making changes in the wrong database) – Rik Dec 14 '16 at 12:37
  • 1
    Even if the switcher is removed, you could still alter the URL and gain access that way. You're going to need a custom request pipeline component after the database context is resolved to check security roles and enforce the rules. I reckon a profile switch ought to do the job, or a role group. – Richard Hauer Dec 14 '16 at 13:20
2

Long shot.. can you try disabling access to below item in core db for the user role and verify if this solves your problem.

enter image description here

1

I have followed the following steps to remove database switcher for particular account.

  • Login to Sitecore.
  • Go to the desktop. Select core database.
  • Go back to Launchpad.
  • Go to Security Editor.
  • Select the appropriate account on top.
  • In content tree, go to content->Applications->Desktop->Tray->Database
  • Select Denied access (x) on read.

It will remove the database switcher for a particular account while it will show for other accounts. Look at the screenshot below.

enter image description here.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.