Try our conversational search powered by Generative AI!

WebAdmins can see, edit and create Visitor groups but they can't delete them?



our customer failed to delete his Visitor group. When he tried it a login popup apppeared. I can delete them without problem(in Admin group).

He said that he probably never tried it before, so maybe it was always so, is this by design? What i had to do if i wanted to support deleting visitor groups for WebAdmins?

These are the configured role providers:

<roleManager enabled="true" defaultProvider="MultiplexingRoleProvider" cacheRolesInCookie="true">
		<clear />
		<add name="MultiplexingRoleProvider" type="EPiServer.Security.MultiplexingRoleProvider, EPiServer.Framework.AspNet" provider1="SqlServerRoleProvider" provider2="WindowsRoleProvider" providerMap1="SqlServerMembershipProvider" providerMap2="WindowsMembershipProvider" />
		<add name="WindowsRoleProvider" applicationName="/" type="EPiServer.Security.WindowsRoleProvider, EPiServer.Cms.AspNet" />
		<add name="SqlServerRoleProvider" type="System.Web.Providers.DefaultRoleProvider, System.Web.Providers, Version=, Culture=neutral, PublicKeyToken=31bf3856ad364e35" connectionStringName="******" applicationName="/" />

These are the virtual roles:

<virtualRoles addClaims="true">
		<add name="Administrators" type="EPiServer.Security.WindowsAdministratorsRole, EPiServer.Framework" />
		<add name="Everyone" type="EPiServer.Security.EveryoneRole, EPiServer.Framework" />
		<add name="Authenticated" type="EPiServer.Security.AuthenticatedRole, EPiServer.Framework" />
		<add name="Anonymous" type="EPiServer.Security.AnonymousRole, EPiServer.Framework" />
		<add name="CmsAdmins" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebAdmins, Administrators" mode="Any" />
		<add name="CmsEditors" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebEditors" mode="Any" />
		<add name="Creator" type="EPiServer.Security.CreatorRole, EPiServer" />
		<add name="PackagingAdmins" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebAdmins, Administrators" mode="Any" />

Someone can shed some light on it on how it works and what i have to change to support deleting Visitor groups for WebAdmins?

Edited, Apr 07, 2021 8:57

Hi, there is a virtual role called VisitorGroupAdmins you can configure. I believe you need to be a member of this role to able to delete Visitor Groups. You are probably member of this role since it's mapped agains CmsAdmins by default.

Edited, Apr 08, 2021 10:17
Tim Schmelter - Apr 08, 2021 11:01
Thanks. But you see in my configuration above that WebAdmins are already part of CmsAdmins which you say that VisitorGroupAdmins is mapped against. Or did i misunderstand it?

Ok, you can't post code in comments.

I'm not sure on that part. But you can easily test this by just adding the role:

<add name="VisitorGroupAdmins" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebAdmins" mode="Any" />
Apr 08, 2021 11:05
Tim Schmelter - Apr 19, 2021 15:08
I've tried that but unfortuanately it didn't work. You see still the login dialog if you try to delete a visitor-group. I have just added that provider in the web.config as you have shown.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.