send requests to expired content to 404 not login page

Five New Optimizely Certifications are Here! Validate your expertise and advance your career with our latest certification exams. Click here to find out more

AI OnAI Off

Home / Forums / Developers (Main Products) Forum / CMS 7.5 - 11 /

send requests to expired content to 404 not login page

adamstewart

Vote:

currently in our 7.5 project any request to a page that has been set to expired will be sent the login page. this is not great behaviour for a production system where by anyone with a bookmark etc to the expired content will get visibility to our login box.

how can we make sure these requests are sent to the 404 page. we are using mvc

#80947

Feb 05, 2014 15:17

Johan Petersson

Vote:

You can override the AccessDenied() method in the template. This is preferably done in a base class.

public override void AccessDenied()
{
    // Important! Do not access CurrentPage directly with an anonymous user, this will cause a loop
    var currentPage = DataFactory.Instance.GetPage(this.CurrentPageLink);

    if (!PageEditing.PageIsInEditMode
        && (!currentPage.CheckPublishedStatus(PagePublishedStatus.Published) || currentPage.IsDeleted))
    {
        this.Response.Status = "404 Not Found";
        this.Response.StatusCode = 404;
        this.Response.End();
    }

    base.AccessDenied();
}

#81002

Feb 06, 2014 17:56

Philip Pittle

Vote:

Hi Johan,

I'm having the same issue in EPiServer CMS 7.1. Can I trouble you to elaborate on your answer. Which class has the AccessDenied method?

Thanks!

#82096

Mar 05, 2014 13:39

Philip Pittle

Vote:

In case anyone else having this problem finds this thread, here is a blog post offering another solution (putting code in the controller). http://www.epinova.no/blog/tarjei-olsen/dates/2012/12/handling-page-access-denied-scenarios-in-episerver-cms-7-mvc/

#82097

Mar 05, 2014 13:47