I'm wondering if just the menu item is removed or if the API/permission is blocked, also? If I configure it to remove the 'Delete' option, could the API still be called to perform the 'Delete'?
(I have an editor who claims she never clicked Delete, but that the root site folder deleted anyway!)
The menu item is removed, but it doesn't block the API access (that can only be done using the actual Umbraco Permissions, and I'm not 100% sure if that blocks the API calls, or just hides the menu either, you'd have to check the source code). In order to call the delete though, they'd need to paste the API call directly into the browser URL, which would require a fairly in depth knowledge of the workings of Umbraco.
Have you checked the umbracoLog table to see of there's any info in there?
My log file confirms that the root site node was unpublished, but all I have is the Editor's word that they didn't click Delete. It looks like Unpublish and Delete each write the same 'unpublished' entry in the log.
Umbraco guys tell me, "all management API methods do check user permissions as well as the tree rendering events", so your package would be a bit less secure.
Nice, a new version of Our!
Don't let me interrupt CG15...
In the U7 version I'm wondering about the 'unpublish' menu action, it doesn't seem to do anything. There is no 'unpublish' menu action in the menu, it's in the dropdown(up) of the green 'Save and Publish' button but it isn't being removed or prevented.
Suggestion: Prevent typos in the .config menu actions from causing errors in the admin.
The unpublished option is indeed for the item in the button, it was working, what version of Umbraco are you using? It's possible that something has changed that has stopped it from working!
Does it block the action?
I'm wondering if just the menu item is removed or if the API/permission is blocked, also? If I configure it to remove the 'Delete' option, could the API still be called to perform the 'Delete'?
(I have an editor who claims she never clicked Delete, but that the root site folder deleted anyway!)
Hiya,
The menu item is removed, but it doesn't block the API access (that can only be done using the actual Umbraco Permissions, and I'm not 100% sure if that blocks the API calls, or just hides the menu either, you'd have to check the source code). In order to call the delete though, they'd need to paste the API call directly into the browser URL, which would require a fairly in depth knowledge of the workings of Umbraco.
Have you checked the umbracoLog table to see of there's any info in there?
My log file confirms that the root site node was unpublished, but all I have is the Editor's word that they didn't click Delete. It looks like Unpublish and Delete each write the same 'unpublished' entry in the log.
Umbraco guys tell me, "all management API methods do check user permissions as well as the tree rendering events", so your package would be a bit less secure.
Have a great CodeGarden!
Thanks,
Glenn
Nice, a new version of Our! Don't let me interrupt CG15...
In the U7 version I'm wondering about the 'unpublish' menu action, it doesn't seem to do anything. There is no 'unpublish' menu action in the menu, it's in the dropdown(up) of the green 'Save and Publish' button but it isn't being removed or prevented.
Suggestion: Prevent typos in the .config menu actions from causing errors in the admin.
Thanks for a great package!
Hiya,
The unpublished option is indeed for the item in the button, it was working, what version of Umbraco are you using? It's possible that something has changed that has stopped it from working!
Let me know and I'll have a look :)
7.2.4
Thanks! Will have a play with that and see if it's something that's changed!
is working on a reply...