Restrict access to 'Admin' and 'Edit' modes at all.

Andrey Lazarev

Vote:

Hello!

Could someone advise me about how can I restrict access to 'Admin' and/or 'Edit' modes from the code depending on the current user's membership? I know which roles shouldn't have access to 'Admin' mode at all, even if this mode is referenced by manually entered URL - but I cannot understand the way to implement this.

#19768

May 04, 2008 15:16

Lars Bodahl

Vote:

You should use the web.config file settings to restrict access to edit and admin mode. Go to the <location path="editUI"> and configure access in the <allow roles="WebEditors, WebAdmins, Administrators" /> line. You should enter the roles that should have access to the editUI path, and then do the same for the editUI/admin path.

#19782

May 05, 2008 13:25

Andrey Lazarev

Vote:

Thank you very much!

#19783

May 05, 2008 13:41