Restrict public access prevents an Umbraco admin from accessing the page
I've implemented a member login for pages that need to be protected. However, the site owner also needs to be able to access these pages but when visited they are also displayed with the login form despite being logged in to the Umbraco backoffice as an admin.
Does anyone have any suggestions how to bypass this or will the site admin also need to have a member login too?
Restrict public access prevents an Umbraco admin from accessing the page
I've implemented a member login for pages that need to be protected. However, the site owner also needs to be able to access these pages but when visited they are also displayed with the login form despite being logged in to the Umbraco backoffice as an admin.
Does anyone have any suggestions how to bypass this or will the site admin also need to have a member login too?
Thanks!
This is by design yes, as Members (front end) and Users (back office users) are seperated.
Ofcourse you can make something to make this work, but it could expose extra security issues whilst doing so.. Keeping it seperate is always safer.
Hi Ambert, thank you for your reply!
Out of interest, do you know how I might go about/find where I can intercept the middleware that handles access to the restricted pages?
I'm not 100% sure what you are looking for, but I do know here is the code that does the checks and redirects you or not.
https://github.com/umbraco/Umbraco-CMS/blob/v9/contrib/src/Umbraco.Web.Website/Routing/PublicAccessRequestHandler.cs
Hope it helps :-)
is working on a reply...