Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Module Level SecurityModule Level Security
Previous
 
Next
New Post
1/24/2009 8:39 AM
 

Hi all,

i am trying to set module level security using a role, but seem it don't work

The RoleA has Modify permission on page, but on the same page i don't want that RoleA can modify some module.

So i have block inherity from page for the module and set only read permission for this role.

I don't understan why user in this role can modify the module !!

I am using DNN 4.9.1

Any help/idea ?

Thanks,

Sandro De Matteis

 


Sandro De Matteis Microsoft IT Pro: Enterprise Admin, Enterprise Messaging Admin Technology Specialist: Microsoft Virtualization Dnn portals: http://www.dbdog.it , http://www.royalcrestgoldn.it, http://www.retrieversclub.it
 
New Post
1/24/2009 4:40 PM
 

Hey Sandro,

I believe that the "edit" permissions at the page level take precedence over the settings at a module level. I thought we could acheive this functionality in DNN 5 with the newe ability to "deny permissions", so I'd be interested to get feedback on the following test scenario which didn't work out exactly as I had thought it would.

When I gave the Registered Users role "edit" permission on a page, and then for a text/html module I un-checked "inherit from page" and then set "edit" permissions to "deny" for that same role. When I logged in as just a "regular" user, I still was able to edit both the page and the module. When, in addition, I specified "deny" for "view" on the text/html module for that role, the module did not appear. So in summary, it seemed to work as intended for view permissions, but not for edit.

Ian

 


Software Engineer
Co-Founder, dnnGallery
Stack Overflow: Ian Robinson
Twitter: @irobinson
Linked In: Ian Robinson
 
New Post
1/24/2009 6:25 PM
 

Hi Ian, thanks for replay.

Just try also with Dnn5 and it's the same ! Also specifying Deny Permission on "Edit Module" and with no Inherity from page check box !!!!

I really don't understand !!

Can anyone from Core group tell us something about this behaviour ?

Thanks, Sandro
 


Sandro De Matteis Microsoft IT Pro: Enterprise Admin, Enterprise Messaging Admin Technology Specialist: Microsoft Virtualization Dnn portals: http://www.dbdog.it , http://www.royalcrestgoldn.it, http://www.retrieversclub.it
 
New Post
1/25/2009 4:33 AM
 
Please note, that module edit permission is always granted to all users with page edit permission, because these people are allowed to alter module settings and would be able to grant this permission to themselves. Inherit VIEW permissions from page does not affect edit permission.
 
You may use a custom permission, but as long as you are using the permission grid and module security infrastructure, admins (including page editors) are always granted, e.i. you will need to implement your own solution.

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
1/25/2009 6:52 PM
 

Thanks for the clarification Sebastian. I suppose I just assumed that was changing in DNN5 with deny permissions - but always giving page admins permissions does make a certain amount of sense.

Take care,

Ian


Software Engineer
Co-Founder, dnnGallery
Stack Overflow: Ian Robinson
Twitter: @irobinson
Linked In: Ian Robinson
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Module Level SecurityModule Level Security


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out