Questions tagged [permissions]
For questions related to the architecture, configuration, purpose and functionality of Sitecore access rights
34
questions
11
votes
2
answers
4k
views
What Role or Security Permission is required to edit the Placeholder and Datasource fields of a component?
We are setting up permission for users of our site, and have assigned our users to the roles sitecore\Sitecore Client Authoring and sitecore\Sitecore Client Designing.
However this does not allow the ...
- 450
7
votes
2
answers
684
views
How can I make the Edit the related item menu show in Experience Editor?
I am setting permissions for content editors of a site. The user in question is a member of the following roles:
sitecore\Sitecore Client Users
sitecore\Author
sitecore\Sitecore Client Social ...
- 450
7
votes
1
answer
1k
views
Edit after workflow approved
I just watched a tutorial on how to set up Workflows here:
https://www.youtube.com/watch?v=hFDUgiQCTmU&list=PLfRWjEN_vCUZqAk8ks5j36yM-BCWup-SZ&index=1#t=35m58s
I followed this tutorial ...
- 155
6
votes
1
answer
706
views
Restricting access to particular page returns 404 instead of redirecting to login
I'm trying to restrict access to a particular page, I've already read everything possible on the matter but instead of redirecting to login page Sitecore is returning a 404.
I've set the loginPage="/...
- 403
5
votes
2
answers
931
views
Any way to transfer all permissions from one role to another?
We are going to have to create new roles for new content sections and it would be very helpful if we could transfer role permssions so that we don't have to reassign permissions for all the folders to ...
- 1,065
5
votes
1
answer
5k
views
Make text field readonly
Is there any easier way of creating read-only fields for all users except admin, not by setting permissions on every user or by creating a role and assigning it to every user/group?
- 1,832
5
votes
1
answer
1k
views
How to return 401 page instead of login page when logged in user doesn't have permission
Currently, when a logged in user tries to access a page that they do not have permission to (because they don't have a certain role), Sitecore seems to redirect the user to the login page.
This is ...
- 1,156
5
votes
2
answers
842
views
Securing a page with item permissions without redirecting the user away
Is it possible to set restrictive extranet group permissions on a page-level item, and still have that page render, albeit differently, to users without the correct permission i.e. present a call to ...
- 722
5
votes
1
answer
751
views
Check if a specific role has read access to an item
Is there a way to check if a specific user role has been granted read permission to a specific item?
I've tried using item.Security.CanRead(role) but to no success (this returns true when I'd expect ...
- 133
5
votes
2
answers
785
views
Disable database switching in sitecore backend
A customer of ours asked if it is possible to fix the account they are using in the sitecore backend (Experience Editor, Centent ediror, Media library, ...) to only the master database.
Our accounts ...
- 313
4
votes
2
answers
777
views
How can I disable drag-and-drop functions on GUI in the Content Editor?
I am currently working on a project using Sitecore version 8.2.7 and our client asked us if we can disable drag-and-drop function so that they do not have to worry about any accidental item deletion.
...
- 375
4
votes
1
answer
927
views
Get base or inherited roles from Role or User object
Is there any way from an API level to obtain a list of roles which are "base" roles from an existing Role object? i.e. the roles which would grant inherited read access?
I've noticed that when ...
- 133
4
votes
1
answer
719
views
Get user privileges on item via Sitecore RESTful API
I am looking for a good way to figure out what privileges a user has via the Sitecore RESTful API.
For example, I can use the RESTful API for ItemService:
/sitecore/api/ssc/item/{itemId}?fields=...
- 165
3
votes
1
answer
160
views
Sitecore EXM Security Issues
Hide the create list column in the sitecore exm for particular users.
We tried to add restrictions in core database the text is hiding still it showing the icon.
Is there any way to hide the icon ...
- 65
3
votes
1
answer
121
views
Item permissions to trigger federated identity
We have configured a new identity provider for Sitecore 9.1 using the documented federatedAuthentication configuration. The identity provider uses OpenID Connect OWIN middleware to authenticate and ...
user1704
3
votes
1
answer
651
views
Security Permissions - Individual inheritance rules set for this account
In my Sitecore instance some red text has appeared next to the Inheritance section in the Assign Security Rights dialog box (see screenshot below). "The item has individual inheritance rules set for ...
- 501
3
votes
1
answer
34
views
Restrict account administration capabilities to a single domain?
We have a couple of sections to our site and want to allow for section owners to do some account maintenance instead of us. We have these two sections and groups of users and roles separated into two ...
- 1,065
3
votes
1
answer
272
views
What is the right permission to allow users to kick other users
I want that our content managers can kick other users which are logged in into sitecore. When I call the site with my admin account I see the Users that are logged in and I can kick them. But the ...
- 1,165
3
votes
2
answers
792
views
"Not Found" error when uploading media files [closed]
I have a photo item with a file field that I can upload to a specific folder in my media library just fine on our development server, but when I try to do this on our staging server, It allows me to ...
- 1,065
2
votes
1
answer
332
views
Can I Limit Publishing for a Role?
I created a role with very limited access for a user to be able to update content on our site with Sitecore 9.2.
How can that role/user be set so that the user is able to publish ONLY what the role ...
- 21
1
vote
2
answers
634
views
Sitecore permissions removed after deployment
A management role was added to Sitecore and permissions were granted to the role to allow Online Comms to manage content. The roles and accounts that were created still exist, however the permissions ...
- 717
1
vote
1
answer
139
views
Make link to experience editor in launchpad different for different users
We have or going to have numerous users who will be able to access the site at different levels of the content tree, but the current link to the experience editor is just https://[domain]/?sc_mode=...
- 1,065
1
vote
1
answer
544
views
Media library not visible to non-admin users within content editor
Suddenly I'm having an issue with users who aren't admin users not seeing the media library item. They can still get to the media library via the tab the the bottom right or through the launchpad, ...
- 1,065
1
vote
1
answer
125
views
Sitecore allow item to access only by Owner
I have a requirement from one of our clients related to Sitecore security roles.
The requirement is that an item can be visible only to the owner of that item and only they have the access to edit the ...
1
vote
1
answer
261
views
Why are Sitecore roles not persisting quick enough when using a scaled CD?
User scenario is as follows:
Anonymous user navigates to website home page
Automatically redirected to /login, which detects user is not authenticated & redirects to ADFS
User authenticates on ...
- 565
1
vote
1
answer
208
views
Assign rights to create new version of an item if a user does not have write access
I have a basic approval workflow set up with three states (Draft, For Approval and Published), and two basic user types that can work on an item in this workflow (Author and Editor).
An author can ...
- 33
1
vote
1
answer
75
views
The item name "__Standard Values" is already definied on this level
I had to change some permissions around so that some users would be able to modify templates. All users should have at least read access to all templates. I just tried to move my item through the ...
- 1,065
0
votes
1
answer
52
views
Role required to display Add an account dialog
Which of the standard Sitecore roles is required for a CMS user to view the 'Add an account' dialog via the Content Editor?
Any Item > Security > Assign security
Adding the user to the sitecore\...
user1704
0
votes
1
answer
47
views
Sitecore role in site1 when installed to site2, missing some restrictions in site2
For the new developer role we restricted access to Development tools in source site.When this role is packaged and installed in target site, it has permission to Development tools. How do we fix this ...
- 349
0
votes
1
answer
312
views
Workbox visibility for locked items
We have a few workflow states in our 8.2 instance, including Draft, then Awaiting Content Admin Approval, then Awaiting PAO Approval. Once it's submitted by a contributor level user to the Awaiting ...
- 1,065
0
votes
1
answer
160
views
Unicorn sync __Security for new items only synchronisation existing items
My Problem is, I've some configuration Items which are created with the new Items Only sync. That seems to work.
But when I add some roles/permissions to this Items on my local dev machine and I ...
- 1,165
0
votes
0
answers
16
views
"Default\anonymous" user's "read" access gets automatically set to "Deny" when certain items are previewed
Using Sitecore 10.2 on a scaled environment that has 1 CM.
The issue is that, for a few specific old items, and for any newly created item, "previewing" the item does 3 things:
Sets the ...
- 815
0
votes
1
answer
79
views
Sitecore permission to Move item for role which Doesn't have delete permissions [duplicate]
There is a requirement that the client wants the basic Author role to have the rights to move the items in the content tree. But, that role is denied the rights to delete. From what I understand, ...
- 347
0
votes
1
answer
199
views
Experience Editor Permissions - How to edit rendering parameters
I have a Sitecore 9.3 instance. I have create a role for my users. It is a member of the following roles:
Analytics Management Reporting
Analytics Content Profiling
Analytics Maintaining
Analytics ...
- 2,629