10 votes
Accepted

Make text field readonly

Modifying raw security values Open the Content Editor Locate the item that represents the template field On the View tab in the Ribbon, make sure the following checkboxes are checked: Standard ...
Dmytro Shevchenko's user avatar
9 votes
Accepted

How to return 401 page instead of login page when logged in user doesn't have permission

Background When the ItemResolver processor executes, it determines the context item for the request based on the current URL. Additionally, it also performs a security check to see if the current ...
Kasaku's user avatar
  • 4,164
8 votes

Check if a specific role has read access to an item

The code you pasted above is incorrect. It doesn't check roles inheritance. item.Security.CanRead(role) method is exactly what you're looking for. If it returns you true when you expect it to ...
Marek Musielak's user avatar
  • 23.8k
8 votes
Accepted

How can I disable drag-and-drop functions on GUI in the Content Editor?

Yes it is possible to disable the drag option. From my investigation, there are 2 ways you can disable it. Solution 1: Comment Out Javascript You can disable the drag and drop feature by commenting ...
Hishaam Namooya's user avatar
7 votes
Accepted

Restricting access to particular page returns 404 instead of redirecting to login

Yep, it's a bug, if I have time I'll report to Sitecore. So the solution is to create your own CustomItemResolver that inherits from ItemResolver. override the Process method, call the base.Process(...
Albernazf's user avatar
  • 403
7 votes
Accepted

Get base or inherited roles from Role or User object

If you need to get a base roles for role, you can use the GetRolesForRole(Role role, bool includeIndirectMembership) method of RolesInRolesManager. For example, if you need to get a base roles for ...
Artem Prashkovich's user avatar
7 votes

Securing a page with item permissions without redirecting the user away

You will need to use component personalization for this. That means all users get access to the page, but on the personalization rules for components you set exceptions based on security. For example:...
Ruud van Falier's user avatar
6 votes

What Role or Security Permission is required to edit the Placeholder and Datasource fields of a component?

You have two options here: Sitecore/Designer role has the permissions you need and I'd recommend to use it if you need to edit Data Source and Placeholder. Grant Write access for the "Client ...
Vlad Iobagiu's user avatar
  • 18.5k
6 votes
Accepted

How can I make the Edit the related item menu show in Experience Editor?

For this menu option to show the user must have read access to the /sitecore/content/Applications/WebEdit/Common Field Buttons/Edit related item item in the Core database or be a member of the ...
Wesley Lomax's user avatar
6 votes

Any way to transfer all permissions from one role to another?

I've written a powershell script which should do the magic for you. I suggest you backup your database before running it, just in case. It searches for ar|ROLE_DOMAIN\ROLE_NAME| string in __Security ...
Marek Musielak's user avatar
  • 23.8k
5 votes
Accepted

Sitecore EXM Security Issues

Maybe I'm wrong but I'm afraid that what you want to achieve is not possible. The items which you changed access rights to are only HyperlinkButton Parameters item and Text Parameters item which ...
Marek Musielak's user avatar
  • 23.8k
4 votes
Accepted

Edit after workflow approved

So one thing I missed from my video was how to configure the roles for having access to various workflow states. You need to open the Security Editor and make sure to select the correct role to edit. ...
Dylan Young's user avatar
  • 4,314
4 votes
Accepted

Get user privileges on item via Sitecore RESTful API

Sitecore security model does provide API for determining user access rights (see Sitecore.Security.AccessControl.ItemAccess class). AFAIK there is no any web service exposing it but you can easily ...
Serhii Shushliapin's user avatar
4 votes
Accepted

Security Permissions - Individual inheritance rules set for this account

Sitecore items inherit security settings by default. An item can inherit the access rights that have been specified for other items that are higher up the content tree. Any item can be configured to ...
Marek Musielak's user avatar
  • 23.8k
4 votes

Any way to transfer all permissions from one role to another?

Use Role Inheritance Your existing roles, which contain the shared access rules that are common among all of the secondary roles, should be members of the secondary roles. Creating the Base Role For ...
Pete Navarra's user avatar
  • 14.7k
4 votes

Make link to experience editor in launchpad different for different users

Easiest way I can think of would be to create multiple copies of the button, change the target url in each link to your desired target. Then set the security on those buttons for the roles that should ...
Richard Seal's user avatar
  • 20.4k
4 votes

Restrict account administration capabilities to a single domain?

You can use the Local Administrator Role to allow management of accounts within a domain. Sitecore local administrators can log in to Sitecore and manage the security applications (including ...
Fredric Foo's user avatar
  • 1,000
4 votes

Can I Limit Publishing for a Role?

You can update the Publishing.CheckSecurity setting, this will ensure that only items that the user has read/write/delete access to will be published. <!-- PUBLISHING SECURITY Check ...
jammykam's user avatar
  • 13.8k
3 votes
Accepted

Media library not visible to non-admin users within content editor

If i understood correct, non admin users are not able to see the Media Library node under Sitecore. Just check the View tab and "Entire Tree" option, if it is unchecked then the media library will ...
Gobinath Saminathan's user avatar
3 votes
Accepted

Workbox visibility for locked items

Based on some discussion with Sitecore support, I learned that workbox items indeed are not supposed to be visible when locked unless you are an admin or the person who locked the item. Specifically ...
Levi Wallach's user avatar
  • 1,085
3 votes
Accepted

Sitecore role in site1 when installed to site2, missing some restrictions in site2

Role based permissions and what items they affect are not contained on thr role itself. All security is actually an attribute/field on the item itself, and only maps to a role. The only data that a ...
Pete Navarra's user avatar
  • 14.7k
3 votes
Accepted

What is the right permission to allow users to kick other users

From Sitecore code comments: When a user logs in, Sitecore checks if the maximum number of users has been reached (as specified in the license). If so, the logout user web page is shown allowing ...
Marek Musielak's user avatar
  • 23.8k
3 votes

Sitecore permissions removed after deployment

To answer your question, its always good practice to add the same permissions to all lower environment but the point here is find out why the permission no longer exists. I think it depends on where ...
Wen's user avatar
  • 51
3 votes
Accepted

Role required to display Add an account dialog

The sitecore\Sitecore Client Securing role grants access to features and applications used to assign access rights. Gives the user access rights to security features in the Content Editor and other ...
Alessandro Faniuolo's user avatar
3 votes
Accepted

Sitecore allow item to access only by Owner

Since you earlier mentioned, that only item owners should be able to view/edit the item, what I suggest is, to have your own implementation of the ItemResolver pipeline processor and in that, you can ...
Debabrata Biswas's user avatar
3 votes

Delete permission for authors to delete items they have created themselves but no other items

this functionality doesn't exist without code customization in Sitecore XMC or Sitecore normal. You can have such a functionality just if a specific user has rights to create/delete items just under a ...
Vlad Iobagiu's user avatar
  • 18.5k
2 votes

Sitecore permissions removed after deployment

This is expected behavior as permissions are part of items. There are stored in Security section in Security field: Switch to 'Raw values' in View Toolbar to see it like above. It is always best ...
Peter Procházka's user avatar
2 votes

Disable database switching in sitecore backend

Long shot.. can you try disabling access to below item in core db for the user role and verify if this solves your problem.
phani's user avatar
  • 804
2 votes

How can I make the Edit the related item menu show in Experience Editor?

Create them under: /sitecore/content/Applications/WebEdit/Edit Frame Buttons and you'll be able to edit specific section of the component. Its in Core database. To check what permissions navigate to /...
Sergey Kravchenko's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible