Questions tagged [security]

Questions related to security in all it's aspects (as long as related to Sitecore). Can be Sitecore product security or security of your Sitecore application.

22 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
11
votes
0answers
156 views

Parameter Template Security Oddity

I experienced a weird issue and was wondering if anyone has seen this. I had to lock down Templates and Renderings to be read only for content authors so a "Publish Related Items" would not publish ...
7
votes
0answers
292 views

How to enable custom hashing algorithm on identity server?

I have sitecore 9.1 and I added pipeline which add new hashing algorithm (pbkdf2 implementation from Zetetic team with 5000 iterations) to CryptoConfig and changed hashAlgorithmType to pbkdf2 in ...
3
votes
0answers
57 views

Stop users logging in to the sitecore CMS with the same account in different browsers

A client has requested that they would like to stop users being able to log into sitecore with the same account in different browsers or machines etc. Does anyone know if this is possible?
2
votes
0answers
132 views

Application access denied - Custom Editor for Sitecore Client

I am building an editor for the Sitecore client. However when I load this editor in the content editor, it shows the error Application access denied. I am currently logged in as an administrator. ...
1
vote
0answers
50 views

Setting language read access for endusers

We have followed this excellent guide: https://briancaos.wordpress.com/2010/06/30/setting-up-security-on-languages-in-sitecore-6/ for setting up security in the Sitecore client for our Sitecore ...
1
vote
0answers
54 views

Sitecore security patch notification

As we know sitecore release security patches sometime which needs to be applied ASAP. Is there any way so that whenever any critical security patch is released by sitecore , we will be notified. Do ...
1
vote
0answers
48 views

What permissions does Sitecore need to manage Solr?

Solr 6.1.0 + Zookeeper + Basic Authentication Sitecore 8.0 Update-5 What are the minimum permissions required for Sitecore to manage Solr? The official documentation says nothing about this AFAICT ...
1
vote
0answers
102 views

Security Error Rebuilding Indexes

Sitecore 8.1 rev. 160302. Looking into my logfiles, there are lots of errors such as: Job Started: Index_Update_IndexName=RSearch ... Exception: System.NullReferenceException Message: Object ...
1
vote
0answers
321 views

Can I use self-signed certificates for xConnect, Solr, and Sitecore Commerce in a Sitecore 9 XP0 production deployment?

I am planning a small Sitecore 9.0.2 + Sitecore Experience Commerce production deployment for a demo website with very low traffic. I do not have a lot of time to provision multiple servers, so I plan ...
1
vote
2answers
379 views

Sitecore content delivery server security hardening anonymous access

I'm using Sitecore 8.0 update 6 and following Sitecore security hardening documentation. I'd like to redirect user when the request is made to https://www.foo.com/sitecore to https://www.foo.com/404. ...
1
vote
0answers
204 views

HttpAntiForgeryException (0x80004005)

The Experience Editor is showing the following message: A serious error occurred please contact the administrator Sitecore logs are displaying the following information: 6732 11:46:21 ERROR Error ...
1
vote
0answers
340 views

Sitecore 8 ADFS module no FedAuth cookie

I've added the Sitecore ADFS module to Sitecore 7.2 and it works. Using the same module on Sitecore 8 doesn't work. I can see the MSISAuth cookies from sts. When it comes to reading the FedAuth ...
0
votes
0answers
26 views

Most roles from AD Connector don't show in Security Editor

I'm attempting to sort out security permissions in our 8.1u3 installation, but I've run into a curious snag: we use the Active Directory connector to pull in all of the users and security groups from ...
0
votes
0answers
23 views

Sitecore PowerShell access allow/deny at same time

Hello Sitecore SPE Experts, I have a very basic question, hope anyone help me: I am using something like below Add-ItemAcl -Path master:\content\home -AccessRight "item:read" -PropagationType Any - ...
0
votes
0answers
29 views

Language fallbacks and permissions conundrum

We have a multi-lingual site, with Global English (en) as the fallback language for all regional languages (eg: en-au defaults to en). The site has a shared architecture, whereby there's only a single ...
0
votes
1answer
102 views

Manage security access for items with GraphQL

We noticed that there is no limitation on what data can be queried, all the data in GraphQL can be retrieved within the Sitecore instance. Any GraphQL request with the correct API Key can retrieve ...
0
votes
0answers
61 views

Admin not able to restore deleted pages

I am facing issue while restoring deleted pages in sitecore. The page which is deleted by author was not able to restore by admin.Please refer below screenshot for error while restore... Thanks in ...
0
votes
0answers
314 views

Not seeing insert options for user

I'm trying to set up a new set of users with roles. I have them members of a couple of different roles that inherit from sitecore roles, including Author, Designer, Sitecore Client Designer and ...
0
votes
0answers
435 views

Create mock up Active Directory Domain Service

I am working on Sitecore intranet site using LDAP module to import, authenticate and manage the AD users, roles and profiles inside the Sitecore. My question is that I need mock up Active directory ...
0
votes
0answers
124 views

Attempting to Change Template logs out user

On a site that was recently upgraded from v8.0 Update 3 to v8.1 Update 3, editors are reporting that when they attempt to change the template of an item, they end up on the login page. These users are ...
0
votes
0answers
395 views

Access rules for media library upload path

I have a multisite setup and I want to use a dedicated folder under media library for all the images that editors can upload to sitecore. And under that folder, I want to have subfolders per website, ...
-1
votes
1answer
47 views

CM Server Phantom.js recommendation to move dataFolder does not work - has anyone implemented this?

I would like to know if the Sitecore Content Management Server security recommendation for phantom.js actually works? Has anyone successfully implemented it? I am specifically talking about the ...