A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

Restrict access to 'Admin' and 'Edit' modes at all.

Vote:
 

Hello!

Could someone advise me about how can I restrict access to 'Admin' and/or 'Edit' modes from the code depending on the current user's membership? I know which roles shouldn't have access to 'Admin' mode at all, even if this mode is referenced by manually entered URL - but I cannot understand the way to implement this.

#19768
May 04, 2008 15:16
Vote:
 
You should use the web.config file settings to restrict access to edit and admin mode. Go to the <location path="editUI"> and configure access in the <allow roles="WebEditors, WebAdmins, Administrators" /> line.  You should enter the roles that should have access to the editUI path, and then do the same for the editUI/admin path.
#19782
May 05, 2008 13:25
Vote:
 
Thank you very much!
#19783
May 05, 2008 13:41
This thread is locked and should be used for reference only. Please use the Episerver CMS 7 and earlier versions forum to open new discussions.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.