Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Role Limits & AS Group assignment via RolesRole Limits & AS Group assignment via Roles
Previous
 
Next
New Post
9/8/2011 8:11 PM
 
Hi,

I've got two questions I hope someone at DNN or the community can help me with.

Question 1
Major clients are asking for the ability to grant a user access to an Active Social groups based on role assignment. I have contacted ActiveModules through *paid* support, sent emails directly to Will's DNN address, left questions on AM forums, etc. and no one has provided an answer.

This is the A#1 open question I have not been able to answer to my clients for over a year. I know that this is a major foundational issue/concern for Will and his team. Can someone please let me know the status is? I would truly appreciate it.

Question 2
A related question is how DNN plans to get around the role limit that some browsers have on role cache. One of our clients is trying to access DNN via Active Directory. Their users can have up to 400 roles. DNN truncates after about 80 roles. (This is why Will did not originally support direct role access to AS Groups.) So - Is there a game plan for DNN to handle large number of roles?

Thanks,
Chris



Chris Wylie
Chief Executive Officer
www.AccordLMS.com
1775 W. State Street Suite 371, Boise ID 83702 USA
 
 
New Post
9/8/2011 8:30 PM
 
I dont know ActiveSocial well so can't talk to your first question, but as for the 2nd we are aware of the issue but currently have no plans to change our portalroles mechanism - there was discussion some time back and a proposed solution that allowed for a larger number of roles (a few hundred as far as I remember) but it was deemed as being a low priority task as it effects a very small number of users (mostly users using roles where user permissions were the correct option) - and users using AD can choose to not enable role syncronisation and manually control role membership. I'm sorry this isnt a good answer for your customer but it's a non-trivial amount of developer hours and we have limited resources - of course if someone came up with an alternative solution and was willing to contribute it I'm sure we'd be happy to evaluate it.

Thanks,
Cathal

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
9/8/2011 8:40 PM
 
Hi Chris,
I have replied to your emails, forum posts and help desk tickets. I'm fairly certain Ben replied to your most recent inquiry this week as well. I'm very familiar with your situation. Our position for your first question is still the same as before: Active Social doesn't support role based security due to limits on the number of roles to which a user can belong. I know I sent you an before which gave you some suggestions on your developers could create a custom scheduled task. I will rewind that email to you shortly.

We are aware of the issues that arise when a user belongs to a large number of roles. We are working to address this situation as part of the Active Social integration.

Thanks,
Will

Will Morgenweck
VP, Product Management
DotNetNuke Corp.
 
New Post
9/8/2011 9:05 PM
 
Hi Folks,

Thank you very much for the prompt responses! 

You are correct - I did receive a few replies, but they were never clear about the road ahead.  Yes, you did mention a scheduler, but as I replied I need the assignment to be immediate and not dependent on a scheduler.  We sell an LMS that provides role based access to eLearning content and different AS groups can be part of a learning path.  Clients are using many other third party modules to grant, or sell roles to grant access to our LMS eLearning content and there is no way I can enforce a "completion" event in all the different modules to run the scheduler.

> Active Social doesn't support role based security due to limits on the number of roles to which a user can belong.
> We are aware of the issues that arise when a user belongs to a large number of roles. We are working to address this situation as part of the Active Social integration.

Again, I am having trouble reading between the lines.  If you are "working to address" the "issues that arise when a user belongs to a large number of roles" as "part of the Active Social integration", does this mean that the "limits on the number of roles to which a user can belong" will be addressed and thereby allow AS to support role based security?  If it doesn't mean this, what does it mean?

I'm sorry to be so dense, but we have major clients like the Government of Quebec and Brother International that have been asking for a definitive reply - for a long time.  For now they are only implementing ActiveForums (since it supports role based security).

Thanks,
Chris



Chris Wylie
Chief Executive Officer
www.AccordLMS.com
1775 W. State Street Suite 371, Boise ID 83702 USA
 
 
New Post
9/9/2011 10:44 AM
 
I understand how roles are very easy to implement and definitely have some advantages for managing access and permissions. However, I still don't believe that using roles is the best option for maintaining members of a social group. Using a role to simply identify a user as being part of a social group certainly is convenient, but that doesn't mean it is the best or even intended purpose. I think there should be a mechanism in the core that allows you to maintain groups of users WITHOUT the need for a security/permission context. As Cathal mentioned, changing the current security role implementation is not an easy task and has a very high risk. I believe there should be an alternative method, which might might be slightly similar to roles, that allows us to properly manage groups of users. That is the solution we are working towards as part of the Active Social integration.

Going back to you overall issue. A properly written scheduled task or even database triggers could give you the instant results you are looking to achieve.

Will Morgenweck
VP, Product Management
DotNetNuke Corp.
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Role Limits & AS Group assignment via RolesRole Limits & AS Group assignment via Roles


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out