Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at

  • Georges 11 posts 32 karma points
    May 03, 2011 @ 21:01

    Multi-node tree picker and user access permissions

    Hi all,

    Weve got a website running, and every content page is associated to an interest (tag) that allows it to be displyed in a contextual manner in respect to the associated interests of a page. The interest picker is a Multi Node tree picker that is linked to the a content structure (doctype:interest) for which the customer can add, edit and remove interest. 

    The content structure is the following:



       Section A 

       Page A1 

       Page A2 


      Section B 

       Page B1 

       Page B2 


       Interest 1 

       Interest 2 


    So the interest picker within every page is linked to the node Interest and its children. All is well until we get into the user permissions. When a user has only access (start node) to the section EN for instance, the Interest Picker will not allow the user to pick its interest, because of the permissions. 

    I tried to give browse permission. with no luck. Is there a way to ignore the user permissions when accessed throug the picker ? Or what would be the best practice/solution ?

    Thanks in advance.


    P.S. Sorry for the formatting, got an xslt error when submitting formating.

  • Stephen 767 posts 2272 karma points c-trib
    May 30, 2011 @ 17:33

    Same issue here. If start node is EN then user has no permission at all to see Interests nodes and can not pick them. If start node is root and you use the browse permission to hide Interests node from the tree, then they are also hidden from the picker. At that point: either the nodes are visible in the main tree, or they are not visible in the picker. Which is a problem to us...

    Currently looking into potential solutions...

  • Jeroen Breuer 4907 posts 12261 karma points MVP 3x admin c-trib
    May 30, 2011 @ 18:00
    Jeroen Breuer

    The MNTP tree always uses the same tree that is used in the content section. You can pick a start node, but the start node must be part of the nodes the user has acces to. I once tried to add extra nodes to my content tree by overriding it, but MNTP does not support that: Not sure what the best solution is.


  • Stephen 767 posts 2272 karma points c-trib
    May 30, 2011 @ 21:58

    @Jeroen, same issue here too, we use a custom content tree. Looking into solutions...

    As for permissions, we're currently experimenting with forking the builtin ActionBrowse permission into ActionBrowse and ActionPick then using ActionBrowse to find out which nodes should appear in the main content tree, and ActionPick to find out those that should appear in the picker.

    Will post results. But it will require an Umbraco Core patch anyway.

  • Stephen 767 posts 2272 karma points c-trib
    May 31, 2011 @ 09:59

    Here's how we (think we have) solved the permission issue.

    Patch MNTP to add a new ActionMntPick permission. Patch FilteredContentTree to override CanUserAccessNode. Grant access if user has Browse permission or MntPick permission ie:

    protected override bool CanUserAccessNode(Document doc, List<IAction> allowedUserOptions)
    if (allowedUserOptions.Contains(umbraco.BusinessLogic.Actions.ActionBrowse.Instance))
    return true;
    if (allowedUserOptions.Contains(ActionMntPick.Instance))
    return true;
    return false;

    Make sure the user does not have Browse permission on the containing folder (here, that would be Interests) so that it does not show in the main Content tree. Grant MntPick permission on that folder, so that it shows in the picker Content tree.

    Now, the user can pick nodes that do not appear in the main tree. It works, but now we're running with a custom uComponent DLL ;-(

    As for the custom content tree, that is a different (and probably more complex) issue.

  • Lachlann 344 posts 626 karma points
    Jan 07, 2014 @ 16:57

    Thought I would resurect this thread.

    I think we have a similar problem, we use the tree picker (now part of the core) to add CTAs to pages, the CTA nodes are defined in a folder outwith the Home node and our client wants to lock permissions so that some users will only have access to certain sections within the home node (so that they cant mess with settings or create new CTAs). However those users should also be able to add CTAs to pages. As mentioned above if a user does not have permissions to view the start node of the tree picker then they cant add any of the nodes.

    Does anyone have any thoughts about workarounds for this? The only thing I can think to do is to use the User Permissions checkboxes instead of the 'starting Node' checkbox to limit what users can and cant do in the Backend, but thats a little more time consuming.

    Thanks in advance.


  • Robert Lundberg 14 posts 60 karma points
    Feb 20, 2015 @ 14:19
    Robert Lundberg

    More resurrection attempts to this thread :)

    For a 7.2.1 Site
    I have the same problem, We have categories that are defined as documenttypes and selected with MNTP. Users with start node that does not incorporate the category node can not select categories.

    Is there not a better way to solve this than compiling the core?



  • Hendy Racher 863 posts 3848 karma points MVP 2x admin c-trib
    Feb 20, 2015 @ 14:34
    Hendy Racher

    Hi Robert,

    You could use a different picker (such as the Xml pickers in nuPickers) as they can get data from anywhere in the content tree (without rending the tree using the current users context - hence not respencting the tree permissions)



  • Robert Lundberg 14 posts 60 karma points
    Feb 23, 2015 @ 08:13
    Robert Lundberg

    Good tip!

    @Hendy, I did as you suggested and used the XmlCheckBoxPicker instead. worked like a charm, no need to migrate any data or such.



Please Sign in or register to post replies

Write your reply to: