Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • organic 108 posts 157 karma points
    Jun 05, 2015 @ 20:10
    organic
    0

    Does it block the action?

    I'm wondering if just the menu item is removed or if the API/permission is blocked, also?  If I configure it to remove the 'Delete' option, could the API still be called to perform the 'Delete'?

    (I have an editor who claims she never clicked Delete, but that the root site folder deleted anyway!)

  • Tim 1193 posts 2675 karma points MVP 3x c-trib
    Jun 08, 2015 @ 10:27
    Tim
    0

    Hiya,

    The menu item is removed, but it doesn't block the API access (that can only be done using the actual Umbraco Permissions, and I'm not 100% sure if that blocks the API calls, or just hides the menu either, you'd have to check the source code). In order to call the delete though, they'd need to paste the API call directly into the browser URL, which would require a fairly in depth knowledge of the workings of Umbraco.

    Have you checked the umbracoLog table to see of there's any info in there?

  • organic 108 posts 157 karma points
    Jun 08, 2015 @ 22:49
    organic
    0

    My log file confirms that the root site node was unpublished, but all I have is the Editor's word that they didn't click Delete.  It looks like Unpublish and Delete each write the same 'unpublished' entry in the log.

    Umbraco guys tell me, "all management API methods do check user permissions as well as the tree rendering events", so your package would be a bit less secure.

    Have a great CodeGarden!

    Thanks,

    Glenn

  • organic 108 posts 157 karma points
    Jun 11, 2015 @ 17:21
    organic
    0

    Nice, a new version of Our! Don't let me interrupt CG15...

    In the U7 version I'm wondering about the 'unpublish' menu action, it doesn't seem to do anything. There is no 'unpublish' menu action in the menu, it's in the dropdown(up) of the green 'Save and Publish' button but it isn't being removed or prevented.

    Suggestion: Prevent typos in the .config menu actions from causing errors in the admin.

    Thanks for a great package!

  • Tim 1193 posts 2675 karma points MVP 3x c-trib
    Jun 16, 2015 @ 08:40
    Tim
    0

    Hiya,

    The unpublished option is indeed for the item in the button, it was working, what version of Umbraco are you using? It's possible that something has changed that has stopped it from working!

    Let me know and I'll have a look :)

  • organic 108 posts 157 karma points
    Jun 16, 2015 @ 15:26
    organic
    0

    7.2.4

  • Tim 1193 posts 2675 karma points MVP 3x c-trib
    Jun 17, 2015 @ 08:18
    Tim
    0

    Thanks! Will have a play with that and see if it's something that's changed!

Please Sign in or register to post replies

Write your reply to:

Draft