Restrict editors to delete page which is translated into other la

Restrict editors to delete page which is translated into other language for which they don't have access

Yagnik Jadav (MVP)

Vote:

We have language specific roles, so editor of one language can not change the content in other language except the language he has access. In our scenario's, we have created 2 languages EN, SV and one user group for each language as EN editors for editing EN language specific pages and the same for SV editors too.

We noticed that SV editor can delete the page if it is translated into SV language having master language is EN but SV editor don't have chagne permission for EN langauge.

So, ideally editor is not allowed to change the content for the language he don't have access and that is working fine but still he can delete the page. Ideally he should allowed to delete their language versions but not the whole page.

I hope you getting me and if we can have this feature available in Episerver out of box, it would be good.

#203202

Apr 11, 2019 10:58

Yagnik Jadav (MVP)

Vote:

We have made user cases and below is our result using latest version of Episerver CMS

http://www.dxred.com/media/1133/delete-access-rights-user-cases.xlsx

Case marked with gray and red is incorrect result.

#203203

Edited, Apr 11, 2019 11:16

Binh Nguyen Thi

Vote:

Please note that deleting page means deleting all versions for all languages. If you want to restrict editor deleting the page then the idea is:

Remove delete access right for pages you want

Set access right for creating/editing language version for content

Try to delete page version (instead of deleting page) by using Version gadget

Hope this help!

#203208

Apr 11, 2019 11:47

valdis

Vote:

one of the option is to subscribe to `IContentEvents.DeletingContent` and check access permission there. if current user who is trying to delete content does not "qualify" to do so (according for example to your provided analysis) - you can set `args.CancelAction = true` and `args.CancelReason = "...."` to give explanation for the user why he or she is not able to delete this content.

#203262

Apr 14, 2019 14:48

Yagnik Jadav (MVP)

Vote:

@Binh Nguyen We need to provide delete permission on page, so editor should able delete pages they have created in their language if they have access. So, expectation is editor should allowed to delete pages which they have created, and they also should allow translating pages in their local language which is created by other editors in different language. But they should not allow to delete pages which they have translated even though they have deleted access on that page because he has not access of master language.

#203266

Apr 14, 2019 16:10

Yagnik Jadav (MVP)

Vote:

@valdis iljuconoks I agree with you we can have language access check on page move or delete event and can cancel the action if they don't have language access but I expect to have this as out of box feature in framework.

#203267

Apr 14, 2019 16:11