There is a group which is not an admin but have edit rights on many pages. So when I login with this group and I go to pages on which it has edit rights, control panel starts appearing. This way I can add new pages as well. But I would like that group to only play with the content. When I try to remove the Edit rights on the page, module on it stops appearing and error is given that the user does not has right.

I think following line in Skins.vb in Init event is responsible for this:

If (PortalSecurity.IsInRoles(PortalSettings.AdministratorRoleName.ToString) = True Or PortalSecurity.IsInRoles(PortalSettings.ActiveTab.AdministratorRoles.ToString) = True) Then

Am I missing anything? How do I restrict the group so that control panel does not appear.

Ok, heres what you do:

You create a new project, copy the default controlpanel ascx from dnn to your project.

Include the app_resources folder.

rename your class, resolve the references. edit the page load near the bottem.

Have it detect when your user isinrole then make grey and disabled the icons you dont want functional

Heres what I do for Teachers

If PortalSecurity.IsInRole("Teacher") AndAlso ouser.IsSuperUser = False Then

'Me.imgAddTabIcon.ImageUrl = "~/Admin/ControlPanel/images/iconbar_addtab_bw.gif"

'cmdAddTab.Enabled = False

'cmdAddTabIcon.Enabled = False

cmdEditTab.Enabled = False

cmdEditTabIcon.Enabled = False

cmdDeleteTab.Enabled = False

cmdDeleteTabIcon.Enabled = False

cmdCopyTab.Enabled = False

cmdCopyTabIcon.Enabled = False

'Else

ClientAPI.AddButtonConfirm(cmdDeleteTab, Services.Localization.Localization.GetString("DeleteTabConfirm", Me.LocalResourceFile))

ClientAPI.AddButtonConfirm(cmdDeleteTabIcon, Services.Localization.Localization.GetString("DeleteTabConfirm", Me.LocalResourceFile))

cmdWizard.Enabled = False

cmdWizardIcon.Enabled = False

cmdSite.Enabled = False

cmdSiteIcon.Enabled = False

cmdUsers.Enabled = False

cmdUsersIcon.Enabled = False

cmdFiles.Enabled = False

cmdFilesIcon.Enabled = False

End If

After all of this, you need to add a role to modulecontrols for the new panel and set your default panel in your host settings.