10
votes
Accepted
Make text field readonly
Modifying raw security values
Open the Content Editor
Locate the item that represents the template field
On the View tab in the Ribbon, make sure the following checkboxes are checked:
Standard ...
9
votes
Accepted
How to return 401 page instead of login page when logged in user doesn't have permission
Background
When the ItemResolver processor executes, it determines the context item for the request based on the current URL. Additionally, it also performs a security check to see if the current ...
8
votes
Check if a specific role has read access to an item
The code you pasted above is incorrect. It doesn't check roles inheritance.
item.Security.CanRead(role) method is exactly what you're looking for.
If it returns you true when you expect it to ...
8
votes
Accepted
How can I disable drag-and-drop functions on GUI in the Content Editor?
Yes it is possible to disable the drag option. From my investigation, there are 2 ways you can disable it.
Solution 1: Comment Out Javascript
You can disable the drag and drop feature by commenting ...
7
votes
Accepted
Restricting access to particular page returns 404 instead of redirecting to login
Yep, it's a bug, if I have time I'll report to Sitecore.
So the solution is to create your own CustomItemResolver that inherits from ItemResolver. override the Process method, call the base.Process(...
7
votes
Accepted
Get base or inherited roles from Role or User object
If you need to get a base roles for role, you can use the GetRolesForRole(Role role, bool includeIndirectMembership) method of RolesInRolesManager.
For example, if you need to get a base roles for ...
7
votes
Securing a page with item permissions without redirecting the user away
You will need to use component personalization for this.
That means all users get access to the page, but on the personalization rules for components you set exceptions based on security.
For example:...
6
votes
What Role or Security Permission is required to edit the Placeholder and Datasource fields of a component?
You have two options here:
Sitecore/Designer role has the permissions you need and I'd recommend to use it if you need to edit Data Source and Placeholder.
Grant Write access for the "Client ...
6
votes
Accepted
How can I make the Edit the related item menu show in Experience Editor?
For this menu option to show the user must have read access to the /sitecore/content/Applications/WebEdit/Common Field Buttons/Edit related item item in the Core database or be a member of the ...
6
votes
Any way to transfer all permissions from one role to another?
I've written a powershell script which should do the magic for you. I suggest you backup your database before running it, just in case.
It searches for ar|ROLE_DOMAIN\ROLE_NAME| string in __Security ...
5
votes
Accepted
Sitecore EXM Security Issues
Maybe I'm wrong but I'm afraid that what you want to achieve is not possible.
The items which you changed access rights to are only HyperlinkButton Parameters item and Text Parameters item which ...
4
votes
Accepted
Edit after workflow approved
So one thing I missed from my video was how to configure the roles for having access to various workflow states. You need to open the Security Editor and make sure to select the correct role to edit. ...
4
votes
Accepted
Get user privileges on item via Sitecore RESTful API
Sitecore security model does provide API for determining user access rights (see Sitecore.Security.AccessControl.ItemAccess class). AFAIK there is no any web service exposing it but you can easily ...
4
votes
Accepted
Security Permissions - Individual inheritance rules set for this account
Sitecore items inherit security settings by default. An item can inherit the access rights that have been specified for other items that are higher up the content tree. Any item can be configured to ...
4
votes
Any way to transfer all permissions from one role to another?
Use Role Inheritance
Your existing roles, which contain the shared access rules that are common among all of the secondary roles, should be members of the secondary roles.
Creating the Base Role
For ...
4
votes
Make link to experience editor in launchpad different for different users
Easiest way I can think of would be to create multiple copies of the button, change the target url in each link to your desired target. Then set the security on those buttons for the roles that should ...
4
votes
Restrict account administration capabilities to a single domain?
You can use the Local Administrator Role to allow management of accounts within a domain.
Sitecore local administrators can log in to Sitecore and manage the security applications (including ...
4
votes
Can I Limit Publishing for a Role?
You can update the Publishing.CheckSecurity setting, this will ensure that only items that the user has read/write/delete access to will be published.
<!--
PUBLISHING SECURITY
Check ...
3
votes
Accepted
Media library not visible to non-admin users within content editor
If i understood correct, non admin users are not able to see the Media Library node under Sitecore.
Just check the View tab and "Entire Tree" option, if it is unchecked then the media library will ...
3
votes
Accepted
Workbox visibility for locked items
Based on some discussion with Sitecore support, I learned that workbox items indeed are not supposed to be visible when locked unless you are an admin or the person who locked the item. Specifically ...
3
votes
Accepted
Sitecore role in site1 when installed to site2, missing some restrictions in site2
Role based permissions and what items they affect are not contained on thr role itself.
All security is actually an attribute/field on the item itself, and only maps to a role.
The only data that a ...
3
votes
Accepted
What is the right permission to allow users to kick other users
From Sitecore code comments:
When a user logs in, Sitecore checks if the maximum number of users has been reached (as specified in the license). If so, the logout user web page is shown allowing ...
3
votes
Sitecore permissions removed after deployment
To answer your question, its always good practice to add the same permissions to all lower environment but the point here is find out why the permission no longer exists.
I think it depends on where ...
3
votes
Accepted
Role required to display Add an account dialog
The sitecore\Sitecore Client Securing role grants access to features and applications used to assign access rights.
Gives the user access rights to security features in the Content Editor and other ...
3
votes
Accepted
Sitecore allow item to access only by Owner
Since you earlier mentioned, that only item owners should be able to view/edit the item, what I suggest is, to have your own implementation of the ItemResolver pipeline processor and in that, you can ...
3
votes
Delete permission for authors to delete items they have created themselves but no other items
this functionality doesn't exist without code customization in Sitecore XMC or Sitecore normal.
You can have such a functionality just if a specific user has rights to create/delete items just under a ...
2
votes
Sitecore permissions removed after deployment
This is expected behavior as permissions are part of items. There are stored in Security section in Security field:
Switch to 'Raw values' in View Toolbar to see it like above.
It is always best ...
2
votes
Disable database switching in sitecore backend
Long shot.. can you try disabling access to below item in core db for the user role and verify if this solves your problem.
2
votes
How can I make the Edit the related item menu show in Experience Editor?
Create them under: /sitecore/content/Applications/WebEdit/Edit Frame Buttons and you'll be able to edit specific section of the component. Its in Core database.
To check what permissions navigate to /...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
permissions × 38security × 14
role-management × 7
experience-editor × 5
editor-user-permissions × 5
workflow × 4
content-editor × 3
user-management × 3
sitecore-client × 2
login × 2
azure × 1
sitecore-api × 1
exm × 1
media-library × 1
publishing × 1
mvc × 1
federated-authentication × 1
unicorn × 1
scaling × 1
content-delivery × 1
webapi × 1
workbox × 1
inheritance × 1
accessibility × 1
openid-connect × 1