November Happy Hour will be moved to Thursday December 5th.
AI OnAI Off
Page permissions problems
Vote:
I'm experiencing som problems with page permissions in EPiServer 4.61. Suddenly, users that aren't logged in cannot access some pages, even though "Everyone" has read permissions. This seems to affect only a particular subtree in the structure, and not quite all of the pages. GetChildren() returns empty collections, and GetPage(id) redirects me to the login screen. If I change the permissions so that Everyone also has change permissions, the pages are returned by GetChildren and GetPage as I expect.
If anyone has an idea what is causing this I would be very grateful. If it makes any difference it seems to have started when I turned on "Friendly" URLs. I have turned them off again and it still doesn't work, so I don't know if there's a connection...
Sep 29, 2006 14:35
There's some authentication built into the method GetPage().
Try using
#14908
Global.EPDataFactory.GetPage(pageref, EPiServer.Security.AccessControlList.NoAccess);
Oct 03, 2006 8:22
I could do that, but then I still wouldn't know what the problem is. I want to know why anonymous users don't have access.
#14909
Oct 04, 2006 8:29
And a brief update: I tried creating a user with no group memberships and access to functions to see the error message. I got the error "Access denied to page ". If i set change access to the user, the page displays, but no child pages are listed.
#14910
Oct 04, 2006 8:31
Hi,
The error is probably due to the fact that you are referencing a restricted page from the main page they are trying to access. When it happened to me, it was because a page in the recycle bin was being referenced. Do you have any PageLists on the page? Check carefully all the links to the page. The error is probably happening when trying to get a link to the target page.
I use a function like this to generate my links:
#14911
public static String GetListDataLink(Object link)
{
// If we have no reference, return an error
if (link == null)
{
// Return an error link
return "javascript:alert('No target specified - select a Link Page.');";
}
PageReference p = (PageReference) link;
// Page bypassing security
PageData pd = Global.EPDataFactory.GetPage(
p, AccessControlList.NoAccess
);
// Check the access
if ( (pd.QueryAccess() & AccessLevel.Read) == AccessLevel.Read)
{
return DLSIPageLink(pd);
}
else
{
// Return an error link
return "javascript:alert('You do not have access to see the target page (" + pd.PageName + " [" + p.ID + "])');";
}
}
Hope this helps
Jon
Oct 09, 2006 18:36
