Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Murray Roke 503 posts 966 karma points c-trib
    May 19, 2020 @ 04:38
    Murray Roke
    0

    Permissions for another user group, other than Administrators

    Hi, I've created an application 'tools' into which I've added diploTraceLog by editing the trees.config

    <add initialize="true" sortOrder="9" alias="diploTraceLog" application="tools" title="Trace Logs" iconClosed="icon-folder" iconOpen="icon-folder-open" type="Diplo.TraceLogViewer.Controllers.TraceLogTreeController, Diplo.TraceLogViewer" />
    

    I've created a new user group in umbraco (not Administrators), and given them permissions to 'tools' but when they click this application it shows the login dialog. If I remove the trees.config line then they see the other tools I have in that section.

    Any ideas? Cheers. Murray.

  • Dan Diplo 1554 posts 6205 karma points MVP 5x c-trib
    May 19, 2020 @ 09:01
    Dan Diplo
    100

    Hi,

    I think it will be because the actual tree controller has authentication on it so that it is only available to people with access to the Developer section. So anyone who attempts to access the controller who doesn't have this permission will get a 401 response. This was just an extra layer of security since the logs can hold sensitive information.

    The line that is doing it is this one:

    [UmbracoApplicationAuthorize(Constants.Applications.Developer)]
    

    https://github.com/DanDiplo/UmbracoTraceLogViewer/blob/master/Diplo.TraceLogViewer/Controllers/TraceLogTreeController.cs#L23

    You could download the source-code and remove this line and swap out your custom DLL, maybe, if needed?

  • Murray Roke 503 posts 966 karma points c-trib
    May 21, 2020 @ 03:16
    Murray Roke
    0

    Sounds like that will be the issue,
    We run a lot of small sites, so we always try and avoid modifying things. Would this make a good PR (If I ever got the time for it ;-)
    Cheers.
    Murray.

    P.S. Tho having said that, u8 has it's own viewer, so we probably won't be in u7 land much longer ;-)

  • Dan Diplo 1554 posts 6205 karma points MVP 5x c-trib
    May 21, 2020 @ 08:08
    Dan Diplo
    0

    As you say, I wasn't really planning any new releases given U8 has its own viewer. So if you did manually replace it, then you wouldn't need to worry about updates overwriting it.

Please Sign in or register to post replies

Write your reply to:

Draft