A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [security]

Questions related to security in all it's aspects (as long as related to Sitecore). Can be Sitecore product security or security of your Sitecore application.

Filter by
Sorted by
Tagged with
7
votes
5answers
2k views

How do you setup your local Sitecore instance to support HTTPS in either a single or multi-tenant configuration?

I'm using SXA and have found that while using the Maps and Location Finder component that the utodetect location feature is no longer available for insecure origins. You may see an error such as this ...
7
votes
2answers
452 views

How can I make the Edit the related item menu show in Experience Editor?

I am setting permissions for content editors of a site. The user in question is a member of the following roles: sitecore\Sitecore Client Users sitecore\Author sitecore\Sitecore Client Social ...
11
votes
2answers
3k views

What Role or Security Permission is required to edit the Placeholder and Datasource fields of a component?

We are setting up permission for users of our site, and have assigned our users to the roles sitecore\Sitecore Client Authoring and sitecore\Sitecore Client Designing. However this does not allow the ...
3
votes
1answer
247 views

Can the ViewState be encrypted on the Content Management server?

For a webforms website, running on a few content deliveries and a content management server, we got a request from a security audit. The request is to encrypt the viewstate (adding <machineKey ...
4
votes
1answer
144 views

Locking down Sitecore rendering caching

Sitecore has some lovely granular security permissions that can help us stop users doing things which can break the site, however one thing I can't obviously see is how to limit access to the caching ...
2
votes
3answers
516 views

Prevent author from accidently breaking lots of links [closed]

Looking for best practices to prevent accidently removing lots of links. I think there has been improvements in this area. Scenario delete home node (accidently), popup launches for option for ...
14
votes
2answers
2k views

Hiding items in the Content Editor for certain users / roles

The content editors want to divide up their roles so that some editors of the site only have access to edit and change a certain area of the site (e.g. /news and all its descendants). These editors ...
15
votes
3answers
5k views

How to unlock the Sitecore admin user account?

I know you can unlock normal Sitecore users from user manager by login in to Sitecore backend, as admin user. Is there any way to unlock Sitecore admin user, when the user account gets locked?
39
votes
5answers
16k views

Is there a way to reset Sitecore admin password from database level?

I forgot my Sitecore admin password and was thinking a way to reset from database level. Is there a SQL query to reset Sitecore admin password ?
8
votes
1answer
581 views

How do I set password complexity?

I need to change the password complexity requirements for authors to meet corporate standards of a password being: Minium of 8 characters Contain at least one numeral Contain at least one symbol
11
votes
4answers
7k views

MediaRequestProtection: An invalid/missing hash value was encountered

My Sitecore error logs contain messages such as: ERROR MediaRequestProtection: An invalid/missing hash value was encountered. The expected hash value... What would be causing this? This is only ...
23
votes
5answers
6k views

How do I disable /sitecore access on a Content Delivery Server?

I have 2 servers: Content Delivery - the live site pointing to the web database. Content Management - the internal only site pointing to the master database. I want to prevent access to /sitecore on ...
7
votes
3answers
2k views

How do I control access to Custom Item Web API controllers?

I am creating a Web API (Controller) inside my Sitecore solution by inheriting ServicesApiController and EnableCors attribute. This service will be called from any IPhone/Android Application (...
26
votes
2answers
674 views

Restricting Item Access Rights to Roles - Prevent Users from being assigned Access Rights directly

Best practice is to assign access rights to roles rather than users. So I would like to block changes that apply access rights for users. Sitecore does not seem to trigger the saveUI pipeline on ...