Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Murray Roke 457 posts 854 karma points c-trib
    1 week ago
    Murray Roke
    0

    Permissions for another user group, other than Administrators

    Hi, I've created an application 'tools' into which I've added diploTraceLog by editing the trees.config

    <add initialize="true" sortOrder="9" alias="diploTraceLog" application="tools" title="Trace Logs" iconClosed="icon-folder" iconOpen="icon-folder-open" type="Diplo.TraceLogViewer.Controllers.TraceLogTreeController, Diplo.TraceLogViewer" />
    

    I've created a new user group in umbraco (not Administrators), and given them permissions to 'tools' but when they click this application it shows the login dialog. If I remove the trees.config line then they see the other tools I have in that section.

    Any ideas? Cheers. Murray.

  • Dan Diplo 1490 posts 5789 karma points MVP 3x c-trib
    1 week ago
    Dan Diplo
    100

    Hi,

    I think it will be because the actual tree controller has authentication on it so that it is only available to people with access to the Developer section. So anyone who attempts to access the controller who doesn't have this permission will get a 401 response. This was just an extra layer of security since the logs can hold sensitive information.

    The line that is doing it is this one:

    [UmbracoApplicationAuthorize(Constants.Applications.Developer)]
    

    https://github.com/DanDiplo/UmbracoTraceLogViewer/blob/master/Diplo.TraceLogViewer/Controllers/TraceLogTreeController.cs#L23

    You could download the source-code and remove this line and swap out your custom DLL, maybe, if needed?

  • Murray Roke 457 posts 854 karma points c-trib
    6 days ago
    Murray Roke
    0

    Sounds like that will be the issue,
    We run a lot of small sites, so we always try and avoid modifying things. Would this make a good PR (If I ever got the time for it ;-)
    Cheers.
    Murray.

    P.S. Tho having said that, u8 has it's own viewer, so we probably won't be in u7 land much longer ;-)

  • Dan Diplo 1490 posts 5789 karma points MVP 3x c-trib
    6 days ago
    Dan Diplo
    0

    As you say, I wasn't really planning any new releases given U8 has its own viewer. So if you did manually replace it, then you wouldn't need to worry about updates overwriting it.

Please Sign in or register to post replies

Write your reply to:

Draft