So I've been trying to give some users access to the Pages Page lately, and I've found something about it that's kind of disturbing.

No matter what settings I give the users, they will be allowed to both view and delete pages they don't have access to here.  It's a useful page so I don't want to just prevent them from accessing it, but surely there has to be some way to at least preventing them from being able to delete pages they don't have access to.

Any thoughts?

Michael

Michael,

You can hide the delete controls from Admin, Pages to prevent users from deleting pages there.  I think this will take care of the problem.

Edit \DesktopModules\Admin\Tabs\tabs.ascx

Locate the tr that includes the cmdDelete settings.  Change the opening tr tag to include runat="server" visible="false"

In regads to nonauthorized users being able to actually view/edit/change page settings, I would think that the security options in the page would actually kick in.