Vulnerability in EPiServer.Forms
I have a website and an instance of that template website.
I want to create a user and give it only edit and save rights for Instance only and not to the template website.
How can i do that in episerver?
You cant deny a user read-access if you allow edit/save in EPiServer. You could however implement some logic in your template (.aspx) that could do just this.
Something like this:
protected override OnLoad(object sender, EventArgs e)
throw new Exception("You are not allowed to view this page.");
Thanks for your reply.
But i dont wanna restrict View rights.
I have created a language version of an existing site. Now i want user to change the content of newly creted language version.
To set these rights, i want them to restrict just to their language version, so that they dont mess up withthe main website version.
Let me know if i didnt make myself clear.
Basically i dont want them to choose the different language when they are in edit mode form left pane at the bottom drop down menu.
To be able to set access rights per language version, you need to use EPiServer CMS 6.0. It is not possible to do in version 4 or 5. (Se page 13 in admin manual on how to configure it)
Ok, So i can't solve this in CMS5.
Now, can we do it programmatically?
if yes, any examples?
Thanks for your help!!
Also, how can i restrict user from seeing tabs, e.g I want user to just edit the content and save it. I dont want them to publish it or see version history.
Have a look at the admin manual here:http://world.episerver.com/Documentation/Categories/EPiServer-CMS-Version/EPiServer-CMS/
Each tab are controlled by access rights. You can control them by going to admin mode, the page type tab and click on the Edit tabs under General settings.
To control what actions a user or group can do on a page, just click Set access rights in admin mode. You can set access rights for read, create, change, delete, publish, administer.
Version 5 admin book is located here:
If you wan't to hide tabs by user groups it's possible with a control adapter. Anders Hattestad has a nice blog post here:
Here's a blog post about hiding pages in the editree: http://world.episerver.com/Blogs/David-af-Sandeberg/Dates/2010/5/Hiding-pages-in-EditTree/
Thank you very much fo ryour help.
I will try this and see if it meets my requirements.