I have a Sitecore 6 site with an Extranet. An example Structure;
- Extranet
- Page 1
- Page 2
- Page 3
- Page 4
On the top-level "Extranet" page i have danied access for extranet\anonymous and given read rights to extranet\role1, extranet\role2, extranet\role3 and extranet\role4.
On the subpages there are different access rights depended on roles. Ie page1 can be accessed by extranet\role1 and extranet\role2 only and page 2 can only be accessed by extranet\role1. I have done this by giving read rights to page 1 and page 2 to extranet\role1 and denying read rights on page 2 to extranet\role2.
But when i have a user that is both in extranet\role1 and extranet\role2 it seems like the deny read rights of extranet\role2 is overwriting the read rights of extranet\role1, meaning the user does not have access page 2 in the above example.
What am i missing to get this to work?
I figured out that you really shouldent use the deny read rights. If you dot his, this will overrule eveyrthing else. Instead you should use the Inheritance option. See How to secure an entire branch in a Sitecore content tree?
Related
I'm working with joomla 3.
Consider a joomla component with 6 views.
And two user groups named user-group1, user-group2.
My requirement is like this:
user-group1 should be able to access the first three views of the component.( access on last three views should be denied for user-group1).
user-group2 should be able to access the last three views of the component.( access on first three views should be denied for user-group2).
I currently have a Joomla site that has 5 different departments of people accessing the backend content. Basically, everyone's looking and poking at other departments contents. So how would I set a different account for everyone and allow them to only modify their own content? E.G.
The salt department can post whatever articles they want, but they cannot modify the sugar department's article.
Does Joomla have this kind of ability or any extensions out there?
That is pretty simple on Joomla 3 system.
Firstly, you create 5 different User Groups in Joomla under Users menu.
Go to Content > Article Manager > click Options button on the top right side > Permissions Tab
In the Permissions Tab, click on each User Group and you have tons of permission to tweak such as: Create, Edit, Edit Own, ...
Hope it helps.
If you haven't configured it yet, the key term to look for is ACL (Access Control List).
Basically you need to create 5 users groups (which are not Super Users).
Here is an article to get you started:
Joomla ACL: Configuring back-end ACL
I'm building a component for the backend. I don't want the users who will access it to access ANYTHING else in the backend except for this component.
I tried following these two instructions:
http://www.aclmanager.net/blog/general/31-how-to-add-basic-acl-support-to-your-extension
http://docs.joomla.org/Developing_a_Model-View-Controller_%28MVC%29_Component_for_Joomla!1.6_-_Part_14#Describing_the_ACL
I made a new User Group with a parent of public and allow admin login (which would lock them out of everything) and then tried adding the ACL code from those links above with permissions to create and edit but I just get a blank screen (not even a logout link). The "Debug Permissions Report" showed the correct permissions but nothing's showing up.
Any ideas? My next step is to manually go through every component and not allow access to that new User Group but it seems like there's an easier way.
Thanks!
In Joomla! 2.5 we regularly create "Content" only backend users that have access only to the 'com_content' component.
Going back through our steps the only thing you haven't specified is adding the new user group to a View Access Level. If you're using the standard sample content installed when setting up a Joomla! website you can add your new user group to the "Special" view access (although any will do).
If a new group has 'admin login' privileges it can login but without a View Access level it can't see anything.. it's a subtle difference but it's the way Joomla! works.
When I have logged in the backend administration section of joomla its showing as such why is it so??
I am totally confused seeing this...
Is this any error
or Any plugin issue...
The site has been Upgraded from 1.7 to 2.5 a month ago..
But then also any hint of such a problem was not seen....
A friend of mine had this issue and I helped him narrow it down.
This problem is caused by fiddling with _viewlevels table in your joomla database. Some plugins/extensions could possibly make such changes as well.
In Joomla Content is classified by who can view/access it. There are three levels of Content Access Classification:
Public - open to all visitors to the web site.
Registered - restricted to all seven Registered User Groups of the web site.
Special - restricted to all User Groups except Guest and Registered.
Administrator belongs to Special. Giving Special all permissions solves thee problem. For some reason, Special class no longer had the ability to access menus of administrator panel in your application.
Edit the Special entry in viewlevels table so it looks like this:
id title ordering rules
|-------------|----------------|-------------|----------------|
| 3 | Special | 2 |[1,2,3,4,5,6,7,8]|
|-------------|----------------|-------------|----------------|
Sources:
Users: Access Control Levels - Joomla documentation
I am looking for a module/extension, or something that can help me to
make a page/item that only one specific user registered can see.
I would like also create a space dedicated to this user, where i can publish there pages and aticles.
Maybe using php and the variable that contains the username and an iframe, but I dont know how to doit.
Thank for the help
GMAccess is a Joomla! component that makes managing groups and access permissions easy, you will be able to create a special group and add your user (via Joomla's user management) to it and manage which pages can be viewed by that group.