I'm researching about the security management of Umbraco system. I understand the concepts of users, permissions and groups but at the moment I didn't find how to restrict the user rigths when assigning members to groups.
In my particular case, I need a way to control by user permissions the next situation: I will have members of a certain type (e.g. member John of member type X) that could belong to one or more existing member groups (for example, group A and group B, although groups C and D also exist). In addition, I will have an special user (e.g Tom) that must be able to assign members to a set of the existing member groups (for example, Tom manages groups B and C). How can I limit the user permissions of Tom so that he can only manage members of the groups that he manages? How can Tom assign John to just group B but not A or D?
I don't beleive this is possible using the GUI interface of Umbraco as it is currently, as you've discovered you can either give a user access to the Members Section or not, but that is about as far as the configuration goes. One way you could do this is remove access to the members section for your users and create a "Custom Section" in Umbraco which incorporates the functionality you require.
In Umbraco Users are people who have access to the Umbraco 'back office' (or admin). You can restrict what these people can/ can't do, to a point. It's not possible (without writing your own application for Umbraco) to restrict a User to only modify certain Members (front-office accounts).
But since Umbraco uses the standard ASP.NET Membership for Members you could always write your own UI which resides outside of Umbraco for that.
User/Membership permissions
I'm researching about the security management of Umbraco system. I understand the concepts of users, permissions and groups but at the moment I didn't find how to restrict the user rigths when assigning members to groups.
In my particular case, I need a way to control by user permissions the next situation: I will have members of a certain type (e.g. member John of member type X) that could belong to one or more existing member groups (for example, group A and group B, although groups C and D also exist). In addition, I will have an special user (e.g Tom) that must be able to assign members to a set of the existing member groups (for example, Tom manages groups B and C). How can I limit the user permissions of Tom so that he can only manage members of the groups that he manages? How can Tom assign John to just group B but not A or D?
Hi Vale
I don't beleive this is possible using the GUI interface of Umbraco as it is currently, as you've discovered you can either give a user access to the Members Section or not, but that is about as far as the configuration goes. One way you could do this is remove access to the members section for your users and create a "Custom Section" in Umbraco which incorporates the functionality you require.
hope this helps.
Thanks,
Matthew
In Umbraco Users are people who have access to the Umbraco 'back office' (or admin). You can restrict what these people can/ can't do, to a point. It's not possible (without writing your own application for Umbraco) to restrict a User to only modify certain Members (front-office accounts).
But since Umbraco uses the standard ASP.NET Membership for Members you could always write your own UI which resides outside of Umbraco for that.
Thanks guys!
I'll see more about your recomendation over ASP.Net Membership and Custom Section and if I have more questions I'll ask again.
Thanks again,
Vale
is working on a reply...