Hi,

Once a user has logged in and athenticated using

CmsFormsAuthentication.AuthenticateAsUser

should a search only return channels and postings that the

CmsHttpContext.current.user has rights to see as set in site manager access
roles?

Jim

[ Post a follow-up to this message ]

Hi Jim,

Searches should only return items where CmsHttpContext.Current.User has
access.

Cheers,
Stefan

"Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
news:3CF8DAA4-5F95-490D-8DCA-3634617F3CD8@microsoft.com...
> Hi,
>
> Once a user has logged in and athenticated using
>
> CmsFormsAuthentication.AuthenticateAsUser
>
> should a search only return channels and postings that the
>
> CmsHttpContext.current.user has rights to see as set in site manager
> access
> roles?
>
> Jim

[ Post a follow-up to this message ]

HI Stefan,

I thought that was the case, and yet I 've checked the user before and after
the search and it still brings backn channels that the user should not be
able to see, a bugger when you are dynamically rendering navigation.

Do you have any notion why this might be happening please?

Jim

"Stefan Goßner [MSFT]" wrote:

> Hi Jim,
>
> Searches should only return items where CmsHttpContext.Current.User has
> access.
>
> Cheers,
> Stefan
>
> "Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
> news:3CF8DAA4-5F95-490D-8DCA-3634617F3CD8@microsoft.com... 
>
>
>

[ Post a follow-up to this message ]

Hi Jim,

if the user browses to these channels: does he get access?

Cheers,
Stefan


"Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
news:339E37CF-8DB5-4D08-A7F6-65F402BE6D27@microsoft.com...[vbcol=seagreen]
> HI Stefan,
>
> I thought that was the case, and yet I 've checked the user before and
> after
> the search and it still brings backn channels that the user should not be
> able to see, a bugger when you are dynamically rendering navigation.
>
> Do you have any notion why this might be happening please?
>
> Jim
>
> "Stefan Goßner [MSFT]" wrote:
> 

[ Post a follow-up to this message ]

Hi Stefan,

Yes he does annoyingly and the next level of navigation renders also, which
is also prohibitied in Site Manager?

Jim

"Stefan Goßner [MSFT]" wrote:

> Hi Jim,
>
> if the user browses to these channels: does he get access?
>
> Cheers,
> Stefan
>
>
> "Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
> news:339E37CF-8DB5-4D08-A7F6-65F402BE6D27@microsoft.com... 
>
>
>

[ Post a follow-up to this message ]

Hi Jim,

if he can access the channels - then he has been given access rights.
Or the guest account has access.

Cheers,
Stefan


"Jim Reynolds" <JimReynolds@discussions.microsoft.com> wrote in message
news:03DB4BBD-BFC8-42BE-91EE-4D6581A5BAC1@microsoft.com...[vbcol=seagreen]
> Hi Stefan,
>
> Yes he does annoyingly and the next level of navigation renders also,
> which
> is also prohibitied in Site Manager?
>
> Jim
>
> "Stefan Goßner [MSFT]" wrote:
> 

[ Post a follow-up to this message ]