Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsRepositoryRepository*NEW* Repository Dev Build posted - item level security*NEW* Repository Dev Build posted - item level security
Previous
 
Next
New Post
11/16/2010 3:48 PM
 
http://www.gooddogs.com/Downloads/tab...

3.5.1 allows you to assign required security roles on each individual item uploaded to a repository module.  So, with this build, you can use a single repository instance to support different groups of users.  For example. Create a security role for each of your clients. Then add a Repository module to your site for all your client downloads. For each item you upload, you can select which security role is required to see it. Then all of your clients can log into your site and based on their security roles will only be able to see their own files.

Just add a [SECURITYROLES] token to your form.html template file. That's all you need to do. Now when uploading a file, you will see a checkbox list of all the security roles and you can check off which ones will be required in order to see the item you are uploading. If you do not check any roles, then the file will be public and all users will see the item. 

Blog entry about new item-level security
http://www.gooddogs.com/Blog/tabid/97...

 
New Post
11/19/2010 12:49 AM
 
I'm wondering about the security of files uploaded. If I assign a security role to a file, is there anything that would prevent the user from sharing the link with another user that does not have that security role? Or, in other words, are the files stored in a directory that is accessible to the public anyways? I've not used the Repository module before and have some secure files I'd like certain security roles to be able to access, but the files need to have all access restricted to only logged in users within a particular security role. Anyone trying to access through any means who is not logged in would not be able to. Can the module handle that level of security?

JOHN GIESY
DotNetNuke Hosting Expert

DotNetNuke 7 Hosting $70 /year
DNN4Less.com Team DotNetNuke  

New Post
11/19/2010 10:04 AM
 
sharing the link will not work, sharing their user id and password will though :)

the files are stored securely, in fact the default option is for the repository module to mangle the filename so even if a user were to know the filename and could somehow manage to access the full URL they would not be able to download the file. 

the user must be logged into the dotnetnuke web site, authenticated and a member of the required security role in order to be able to see the file at all, let alone download it
 
New Post
11/19/2010 10:17 AM
 
That is very cool. Perfect in fact. Thank you.

JOHN GIESY
DotNetNuke Hosting Expert

DotNetNuke 7 Hosting $70 /year
DNN4Less.com Team DotNetNuke  

New Post
3/7/2011 4:40 PM
 
Hi Steve

What if I assign security roles for some categories(folders) How do I do that?
Say I have the following categories:
- integrator (accessible only by 'integrator' role
- distributor (accessible only by 'distributor' role)
- clients (accessible by both above)

How do I do that?
thanks
jam-
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsRepositoryRepository*NEW* Repository Dev Build posted - item level security*NEW* Repository Dev Build posted - item level security


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out