Questions tagged [security]

Questions related to security in all it's aspects (as long as related to Sitecore). Can be Sitecore product security or security of your Sitecore application.

24 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
345 views

How to enable custom hashing algorithm on identity server?

I have sitecore 9.1 and I added pipeline which add new hashing algorithm (pbkdf2 implementation from Zetetic team with 5000 iterations) to CryptoConfig and changed hashAlgorithmType to pbkdf2 in ...
3
votes
0answers
57 views

Stop users logging in to the sitecore CMS with the same account in different browsers

A client has requested that they would like to stop users being able to log into sitecore with the same account in different browsers or machines etc. Does anyone know if this is possible?
2
votes
0answers
135 views

Application access denied - Custom Editor for Sitecore Client

I am building an editor for the Sitecore client. However when I load this editor in the content editor, it shows the error Application access denied. I am currently logged in as an administrator. ...
1
vote
0answers
29 views

After deleting user, cannot immediately reuse username

This is Sitecore 9.1.1, and we're working with doing some test runs on user creation. Basically folks are creating users to log into the front end of the site, but they're sometimes not picking the ...
1
vote
0answers
52 views

Setting language read access for endusers

We have followed this excellent guide: https://briancaos.wordpress.com/2010/06/30/setting-up-security-on-languages-in-sitecore-6/ for setting up security in the Sitecore client for our Sitecore ...
1
vote
0answers
61 views

Sitecore security patch notification

As we know sitecore release security patches sometime which needs to be applied ASAP. Is there any way so that whenever any critical security patch is released by sitecore , we will be notified. Do ...
1
vote
0answers
48 views

What permissions does Sitecore need to manage Solr?

Solr 6.1.0 + Zookeeper + Basic Authentication Sitecore 8.0 Update-5 What are the minimum permissions required for Sitecore to manage Solr? The official documentation says nothing about this AFAICT ...
1
vote
0answers
107 views

Security Error Rebuilding Indexes

Sitecore 8.1 rev. 160302. Looking into my logfiles, there are lots of errors such as: Job Started: Index_Update_IndexName=RSearch ... Exception: System.NullReferenceException Message: Object ...
1
vote
0answers
331 views

Can I use self-signed certificates for xConnect, Solr, and Sitecore Commerce in a Sitecore 9 XP0 production deployment?

I am planning a small Sitecore 9.0.2 + Sitecore Experience Commerce production deployment for a demo website with very low traffic. I do not have a lot of time to provision multiple servers, so I plan ...
1
vote
2answers
404 views

Sitecore content delivery server security hardening anonymous access

I'm using Sitecore 8.0 update 6 and following Sitecore security hardening documentation. I'd like to redirect user when the request is made to https://www.foo.com/sitecore to https://www.foo.com/404. ...
1
vote
0answers
210 views

HttpAntiForgeryException (0x80004005)

The Experience Editor is showing the following message: A serious error occurred please contact the administrator Sitecore logs are displaying the following information: 6732 11:46:21 ERROR Error ...
1
vote
0answers
342 views

Sitecore 8 ADFS module no FedAuth cookie

I've added the Sitecore ADFS module to Sitecore 7.2 and it works. Using the same module on Sitecore 8 doesn't work. I can see the MSISAuth cookies from sts. When it comes to reading the FedAuth ...
0
votes
0answers
17 views

IDX10500 error when calling Sitecore with JWT token from Postman after updating identity server certificate

I am using Sitecore 9.1 and have recently updated my .pfx identity server certificates in Azure, due to the old ones expiring. After updating the Sitecore.IdentityServer.Host.xml configuration, the ...
0
votes
1answer
16 views

How to restrict the Security access for Sitecore Contextual ribbons

Have created a contextual ribbon and added the same to the standard values of my desired Template. The functionality is working good. But I wish to restrict the access of this Ribbon to only few ...
0
votes
0answers
26 views

Most roles from AD Connector don't show in Security Editor

I'm attempting to sort out security permissions in our 8.1u3 installation, but I've run into a curious snag: we use the Active Directory connector to pull in all of the users and security groups from ...
0
votes
0answers
25 views

Sitecore PowerShell access allow/deny at same time

Hello Sitecore SPE Experts, I have a very basic question, hope anyone help me: I am using something like below Add-ItemAcl -Path master:\content\home -AccessRight "item:read" -PropagationType Any - ...
0
votes
0answers
32 views

Language fallbacks and permissions conundrum

We have a multi-lingual site, with Global English (en) as the fallback language for all regional languages (eg: en-au defaults to en). The site has a shared architecture, whereby there's only a single ...
0
votes
1answer
128 views

Manage security access for items with GraphQL

We noticed that there is no limitation on what data can be queried, all the data in GraphQL can be retrieved within the Sitecore instance. Any GraphQL request with the correct API Key can retrieve ...
0
votes
0answers
62 views

Admin not able to restore deleted pages

I am facing issue while restoring deleted pages in sitecore. The page which is deleted by author was not able to restore by admin.Please refer below screenshot for error while restore... Thanks in ...
0
votes
0answers
365 views

Not seeing insert options for user

I'm trying to set up a new set of users with roles. I have them members of a couple of different roles that inherit from sitecore roles, including Author, Designer, Sitecore Client Designer and ...
0
votes
0answers
462 views

Create mock up Active Directory Domain Service

I am working on Sitecore intranet site using LDAP module to import, authenticate and manage the AD users, roles and profiles inside the Sitecore. My question is that I need mock up Active directory ...
0
votes
0answers
127 views

Attempting to Change Template logs out user

On a site that was recently upgraded from v8.0 Update 3 to v8.1 Update 3, editors are reporting that when they attempt to change the template of an item, they end up on the login page. These users are ...
0
votes
0answers
402 views

Access rules for media library upload path

I have a multisite setup and I want to use a dedicated folder under media library for all the images that editors can upload to sitecore. And under that folder, I want to have subfolders per website, ...
-1
votes
1answer
53 views

CM Server Phantom.js recommendation to move dataFolder does not work - has anyone implemented this?

I would like to know if the Sitecore Content Management Server security recommendation for phantom.js actually works? Has anyone successfully implemented it? I am specifically talking about the ...