12
votes
How to send email, when users roles change - User Manager customization
One option is to hook into Sitecore's user:updated event (and optionally user:updated:remote). This event is raised when a user has been updated, the remote event handler is raised when a user was ...
- 1,703
10
votes
Accepted
Administrator access as a role
Yes, "admin" is not a role and cannot be assigned to a role. You shouldn't do that either. If you need that many admin users, there might be something fishy with your security requirements.
You might ...
- 20k
7
votes
Accepted
Get base or inherited roles from Role or User object
If you need to get a base roles for role, you can use the GetRolesForRole(Role role, bool includeIndirectMembership) method of RolesInRolesManager.
For example, if you need to get a base roles for ...
- 4,113
6
votes
Accepted
Inheriting Sitecore Roles
Deny access right cannot be overwritten by any allow rule.
What you need to do is to:
remove that Deny read access for Editor role
make your Approver role a member of Editor role
disable inheritance ...
- 23.2k
6
votes
Accepted
Is it possible to revoke access of item from all roles at once without looping?
So you want item A1B1C1 to only be accessible by RoleA1B1C1? First thing would be this, I'm assuming that RoleA1B1C1 is inheriting RoleA1B1, and then RoleA1B1 is inheriting RoleA1. Otherwise, ...
- 5,092
6
votes
Any known way to hide Sitecore sensitive data
I was able to find the processor(Sitecore.Pipelines.HttpRequest.ExecuteRequest in Sitecore.Kernel) which adds these query strings and they are not configurable. To fix the issue I created a new class(...
- 393
6
votes
I packaged a bunch of roles but when seen in next environment, the security access and options did not translate in the next environment
Since you mention the use of TDS, you can manage the synchronization of all Roles and security on item using features available in TDS. This has the advantage that both Roles and the security becomes ...
- 13.8k
5
votes
Is it possible to assign the ability to unlock multiple users' items to a non-administrator role?
Delegated Administration with SPE
Let's say for example that you wanted to provide a Context Menu option for users to unlock items based on the following criteria.
Show when User is in the sitecore\...
- 18k
5
votes
Approver role doesn't see the workflow actions
The the role to see the actions, you have to assign the permissions at the action level. Without that, the role will be denied the permissions to see the action.
- 13.1k
4
votes
Is it possible to assign the ability to unlock multiple users' items to a non-administrator role?
Assuming you're only interested in shell behaviour, there's a long and a short answer.
Short answer: no. The command that executes this functionality (Sitecore.Shell.Framework.Commands.CheckIn) only ...
- 363
4
votes
Administrator access as a role
As @Gatogordo mentions, you likely shouldn't be using Administrator. This should be a checkbox you use on your 'emergency' account which you use to access things that nobody should access.
Inheriting ...
- 6,751
4
votes
Accepted
Restricting which roles a role can assign
You can't directly set permissions to restrict user to only be able to add certain roles. But you can use Sitecore local managed domain to sort of workaround this issue.
Basically, you would have
...
- 1,000
4
votes
Approver role doesn't see the workflow actions
Further to what Chris already said; it helps if you expand the security view. Click "Columns" in your Security Editor, and bring in the additional columns you need to look out for.
- 25k
4
votes
Accepted
How can I update Virtual User's role after authenticating via external Identity Provider (Azure)?
Response from Sitecore Support suggests that it is not possible to manipulate the Sitecore Virtual User roles or profile when using Federated Authentication. I have been advised that:
This is ...
3
votes
Access to Dictionary items for Content Authors
What Joost say is 100% correct, I recommend to use specific domain to specific website.
Is really easy to copy your dictionary domain from /system node to other place.
In version 6.6 as far I ...
- 18.2k
3
votes
Accepted
Access to Dictionary items for Content Authors
You shouldn't place dictionary content items under system. Instead make a dictionary item that inherits from dictionary under your content node and apply appropriate access to this item.
If you still ...
- 505
3
votes
Accepted
Roles are missing from Role Manager. How would I restore the roles for the newer version?
From the vanilla instance it should be easy to package up the Roles you are missing and then just install that package on your client instance. I have had to do that before. Packaging roles is nice ...
- 20k
3
votes
Remove the ability of a role to modify publish targets
You cannot disable this via user access. The only way to hide the target tab is to override the sitecore publish restriction UI. I have written an article on how to achieve this. The url is here.
In ...
- 9,626
3
votes
Language based roles
There two special access permissions for languages.
Language Read and Language Write.
To see them in the Security Editor/Access Viewer click Columns and then tick them in the list. Then you can set ...
- 1,477
3
votes
Read access to role is not working
Have you given the user any other roles at all or just the new roles?
In order to give the user basic access to Sitecore you will usually need to give them the Sitecore Client Authoring & ...
- 9,306
3
votes
Sitecore permissions removed after deployment
To answer your question, its always good practice to add the same permissions to all lower environment but the point here is find out why the permission no longer exists.
I think it depends on where ...
- 51
3
votes
How to allow a user to publish items one by one, but not the entire site
Try to make your "Author" role a member of "Sitecore Client Publishing" role to view and modify a subset of items, and can publish only a single item.
- 623
3
votes
Accepted
Do not colocate serialized items and serialized roles in the same folder
You can choose any folder. Just not one that is being used for anything else.
The reason being; the Unicorn default datastore expects YML files of Items. Roles and Users are not items - the two ...
- 25k
3
votes
Give Role permissions to add Url Redirects in System folder
As the Url Redirect module is a 3rd party Sitecore module, by default it doesn't have any access rights applied to it (I just installed and checked to be sure).
You will need to pick your role, or ...
- 20k
3
votes
Accepted
Role required to display Add an account dialog
The sitecore\Sitecore Client Securing role grants access to features and applications used to assign access rights.
Gives the user access rights to security features in the Content Editor and other ...
- 2,574
3
votes
Accepted
How can I move access rights on Sitecore custom role?
Access rights are stored directly on the items.
You cannot move access rights assigned for a role or user to another environment using content packages without including those items inside content ...
- 23.2k
3
votes
Accepted
Sitecore allow item to access only by Owner
Since you earlier mentioned, that only item owners should be able to view/edit the item, what I suggest is, to have your own implementation of the ItemResolver pipeline processor and in that, you can ...
- 349
3
votes
Disable Custom Chunk Button calling PSE script if there is no write access to selected item
When working with SPE you can use the rules fields (Show/Enable) to manage the state of the buttons. I use these at work all the time and work reliably.
As you can see in the following figure, the ...
- 18k
3
votes
Content Manager not seeing default sections on items
The user which doesn't see default sections must check Standard fields in VIEW ribbon in Content Editor:
- 23.2k
3
votes
Accepted
How to merge two roles into one, and delete the two old ones?
SPE includes a toolbox item called "Transfer item security" which provides a way to query what's in the database matching a role or user and transfer ownership to a new role.
You can find ...
- 18k
Only top scored, non community-wiki answers of a minimum length are eligible