Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDevelopment and...Development and...Open Core Testi...Open Core Testi...Security Flaw - Cant edit module when viewing page?Security Flaw - Cant edit module when viewing page?
Previous
 
Next
New Post
11/6/2012 5:39 PM
 

I don't know if this is a flaw or an "undocumented feature"  but...

In some situations a module may be set to allow one specific role/user to edit it's content while the page itself does not explicitly give the user access to edit *all* modules on the page.  Right now.. .a user with moduel edit permissions cannot edit the module - because they can't switch to edit mode - the edit page option does not appear on pages when the permissions isnt' set.

To recreate...

Grant a user Edit privilages to a single module on the page (without changing page permissions).
Logon as the user - no edit capabilities.

DNN Build 1065

 
New Post
11/6/2012 5:52 PM
 
doh!... nevermind - it doesn't show when the work is published waiting on approval... once published it appears again...slick.
 
Previous
 
Next
HomeHomeDevelopment and...Development and...Open Core Testi...Open Core Testi...Security Flaw - Cant edit module when viewing page?Security Flaw - Cant edit module when viewing page?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out