Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Changing Role Names Changing Role Names
Previous
 
Next
New Post
5/22/2008 6:06 AM
 

I have observed that DNN does not allow changing Role Names for Roles once created through the User Interface.

When I studied the underlying Stored Procedure, I observed that neither does the procedure supports so.

Is there any specific reason to disallow changing Role Names (Role Group Names are allowed to be changed however!!!)

For some reason, my modules require chaging Role Names after they have been created. Although I have coded the Sql & VB part of it (which was not very difficult), is there any kind of security or integration issue with the rest of DNN framework, if I am doing so through a custom module???

 
New Post
5/23/2008 9:24 AM
 

If roles are stored in cookies they may affect security/permissions if they persist as different names (until they are reloaded). 

Don't quote me on this, as I don't recall how this mechanism works when one selects "remember login".


Dwayne J. Baldwin
 
New Post
5/23/2008 10:06 AM
 

Then, there are 3 points I would like to know here:

1) What mechanism is used when someone selets "Remember Login"?

2) How can I configure DNN not to use cookies to persist security/permissions?

3) Even if DNN uses cookies to persist security information, how can I make DNN to reject all cookies & set them anew by asking the user to re-login after I have updated role names??? This should not be much of a problem, as obviously role names are not updated that often. However, if & when they do, it is important to expire all cookies, or else an unauthorized user may gain access to a restricted portion of the site, if the Role Names clash in some way after updation!!!

 
New Post
5/23/2008 11:14 AM
 

1) I don't recall when DNN actually reloads permissions - during new logins or with remembered logins.

2) DNN permissions depend on cookies during the session, and persist with remember login. (Depending on the length of the role names, we discovered that about 50 roles seemed to reach the storage limits of a cookie.)

3) I suppose you could force the cookie to expire like a regular login.

As for clashing, that is why role names cannot change in the first place.

I hope this is of some help to you.


Dwayne J. Baldwin
 
New Post
5/23/2008 11:44 AM
 

I saw a table UsersOnline that is used by DNN. If I clear that table after Role Updation, would that Logout all users???

How does DNN decide which users are logged in when it shows the appropriate icon on Admin User Management Page. If there is a IsOnline value somewhere in the DB, I can clear that. Or Else, I can clear out the UsersOnline table. Would that resolve the issue???

Can I hook into the DNN Login procedure. That way, after I update a Role, I can set some Flag myself, & clear the cookies if that flag is set, thus requiring users to relogin after Role Updation???

 
Previous
 
Next
HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Changing Role Names Changing Role Names


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out