Members able to login to any protected area of any Member Group
Using Umbraco v4.5.2
I have set "Public Access" on two different sections of a site. Each section requires a different username and password. I am using a ASP.NET login control to login to these sections. If I navigate to either section I am able to successfully login using both section's credentials! Not good. How can I limit access to the specified member for the respected section?
I have tried using Single user protection and Role based protection as well as setting up appropriate Member Groups and Member Types and setting each member to their specified member group.
Sounds pretty weird and should of course not be possible at all! Just for sake of testing, did you try this on a barebone umbraco install with just Runway installed? Might be good idea to verify whether this is indeed a bug. If so, please report on Codeplex.
This is indeed on a barebone Runway install. I figured this should not be possible as each section that is protected belongs to a different Member Group.
It seems as though it's a bug. Dirk, in your experience should I report this as a bug?
Checked it on a 4.5.1 CWS2 install, couldn't repro the issue, will do a quick test on a 4.5.2 CWS2 install to verify whether this version introduced this issue.
Members able to login to any protected area of any Member Group
Using Umbraco v4.5.2
I have set "Public Access" on two different sections of a site. Each section requires a different username and password. I am using a ASP.NET login control to login to these sections. If I navigate to either section I am able to successfully login using both section's credentials! Not good. How can I limit access to the specified member for the respected section?
I have tried using Single user protection and Role based protection as well as setting up appropriate Member Groups and Member Types and setting each member to their specified member group.
Thanks!
Chris,
Can you paste the code of your login control, i suspect you are doing the login check but are you doing the member belongs to role check?
Regards
Ismail
Thanks for the reply Ismail, here is the code:
<asp:LoginView ID="loginView" runat="server"><AnonymousTemplate>
<asp:Login ID="Login1" runat="server"></asp:Login>
</AnonymousTemplate>
<LoggedInTemplate>
Welcome
<asp:LoginName ID="LoginName1" runat="server" />
<asp:LoginStatus ID="LoginStatus1" runat="server" />
</LoggedInTemplate>
</asp:LoginView>
Chris,
Whats in the code behind file?
Regards
Ismail
There is currently nothing in the code behind. The login view control markup is the only thing on the page. Obviously I should be doing something?
Thanks for your help.
Sounds pretty weird and should of course not be possible at all! Just for sake of testing, did you try this on a barebone umbraco install with just Runway installed? Might be good idea to verify whether this is indeed a bug. If so, please report on Codeplex.
Cheers,
/Dirk
Dirk,
This is indeed on a barebone Runway install. I figured this should not be possible as each section that is protected belongs to a different Member Group.
It seems as though it's a bug. Dirk, in your experience should I report this as a bug?
Thanks!
Checked it on a 4.5.1 CWS2 install, couldn't repro the issue, will do a quick test on a 4.5.2 CWS2 install to verify whether this version introduced this issue.
Cheers,
/Dirk
Dirk,
I also tested this on 4.5.1 Runway and get the same issue. Can you also provide the steps you took, maybe I'm doing something silly?
I appreciate the help.
Dirk,
Have you had a chance to check this yet? Thanks.
Nope, didn't have the chance yet, will do over the weekend... Keeping you posted.
Cheers,
/Dirk
is working on a reply...
This forum is in read-only mode while we transition to the new forum.
You can continue this topic on the new forum by tapping the "Continue discussion" link below.