Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Sub-module level searchSub-module level search
Previous
 
Next
New Post
10/3/2006 4:25 PM
 
I'm in the processes of developing a module that uses the standard security roles to restict access to portions of the module, similar to what the Forums module is doing.  The current search does not allow a module to specify this level of access to a search item.  This results in items being displayed that users does not have access to if they click the link.  Even worse is that the actual data could be displayed in the search results that they should not see.

I was thinking that the following would be a simple way to offer this feature.

1) The SearchItemInfo class constructor expose another argument for specifying the list of roles, I'll call it ItemAccess
2) The Search provider persist ItemAccess for each item, presumably in the SearchItem table.
3) When a query is submited the Search provider would check that the user is in this list of roles (if a list was provided) as well as at the module and page level.

The only problem I see with this approach is that if security changes at the sub-module level after the item is indexed the old security would apply until the item is re-indexed.  The module would have to be sure to track a datastamp for indexing and set it when both data or security changed.

Does anyone else have a need for a feature like this?  Any other suggests on how to impliment something like this.
 
Previous
 
Next
HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Sub-module level searchSub-module level search


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out