|
Home > Archive > Microsoft Content Management Server > February 2007 > Authentication
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| Jim Reynolds 2007-02-09, 1:16 pm |
| Hi,
Once a user has logged in and athenticated using
CmsFormsAuthentication.AuthenticateAsUser
should a search only return channels and postings that the
CmsHttpContext.current.user has rights to see as set in site manager access
roles?
Jim
| |
| Stefan Goßner [MSFT] 2007-02-09, 1:16 pm |
| Hi Jim,
Searches should only return items where CmsHttpContext.Current.User has
access.
Cheers,
Stefan
"Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
news:3CF8DAA4-5F95-490D-8DCA-3634617F3CD8@microsoft.com...
> Hi,
>
> Once a user has logged in and athenticated using
>
> CmsFormsAuthentication.AuthenticateAsUser
>
> should a search only return channels and postings that the
>
> CmsHttpContext.current.user has rights to see as set in site manager
> access
> roles?
>
> Jim
| |
| Jim Reynolds 2007-02-09, 1:16 pm |
| HI Stefan,
I thought that was the case, and yet I 've checked the user before and after
the search and it still brings backn channels that the user should not be
able to see, a bugger when you are dynamically rendering navigation.
Do you have any notion why this might be happening please?
Jim
"Stefan Goßner [MSFT]" wrote:
> Hi Jim,
>
> Searches should only return items where CmsHttpContext.Current.User has
> access.
>
> Cheers,
> Stefan
>
> "Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
> news:3CF8DAA4-5F95-490D-8DCA-3634617F3CD8@microsoft.com...
>
>
>
| |
| Stefan Goßner [MSFT] 2007-02-09, 1:16 pm |
| Hi Jim,
if the user browses to these channels: does he get access?
Cheers,
Stefan
"Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
news:339E37CF-8DB5-4D08-A7F6-65F402BE6D27@microsoft.com...[vbcol=seagreen]
> HI Stefan,
>
> I thought that was the case, and yet I 've checked the user before and
> after
> the search and it still brings backn channels that the user should not be
> able to see, a bugger when you are dynamically rendering navigation.
>
> Do you have any notion why this might be happening please?
>
> Jim
>
> "Stefan Goßner [MSFT]" wrote:
>
| |
| Jim Reynolds 2007-02-09, 1:16 pm |
| Hi Stefan,
Yes he does annoyingly and the next level of navigation renders also, which
is also prohibitied in Site Manager?
Jim
"Stefan Goßner [MSFT]" wrote:
> Hi Jim,
>
> if the user browses to these channels: does he get access?
>
> Cheers,
> Stefan
>
>
> "Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
> news:339E37CF-8DB5-4D08-A7F6-65F402BE6D27@microsoft.com...
>
>
>
| |
| Stefan Goßner [MSFT] 2007-02-09, 1:16 pm |
| Hi Jim,
if he can access the channels - then he has been given access rights.
Or the guest account has access.
Cheers,
Stefan
"Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
news:03DB4BBD-BFC8-42BE-91EE-4D6581A5BAC1@microsoft.com...[vbcol=seagreen]
> Hi Stefan,
>
> Yes he does annoyingly and the next level of navigation renders also,
> which
> is also prohibitied in Site Manager?
>
> Jim
>
> "Stefan Goßner [MSFT]" wrote:
>
|
|
|
|
|