User can access protected content using "search" function

This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.

Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.

This is the place to report bugs and get support

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.
Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum.
This thread is closed to new posts. You must sign in to post in the forums.
10/15/2012 5:59:31 PM
Gravatar
Total Posts 22

User can access protected content using "search" function

Hello!

I have a mojoPortal 2.3.9.0 installed on Windows 7 (x64).

Not authenticated user can access protected content using "search" function.

Can anybody help me?

P.S. Tested with new mojoPortal 2.3.9.3 - same effect. Note: 2.3.9.3 version do not display marked list correctly (missed markers).

10/16/2012 9:31:19 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

I'm not able to reproduce this problem. Please be specific about what you mean by protected content.

If the page or feature instance is protected by roles then they should not appear in search results since the allowed roles are included in the search index and used to filter the search results.

If the page is marked as not included in the menu or hide form authenticated, that is not protected content because those ar enot security features they are only cosmetic settings.

If the content is really protected by roles and is appearing to unauthenticated users in the search results then probably something happended to the file system permissions that is preventing the index from being updated when roles permissions are changed. I would try rebuilding the index and make sure the files disappear from the index folder and then re-appear after they are re-indexed.

I also do not know what you mean by "marked list" and "missed markers", those are not terms I'm familiar with so please clarify what you mean by that.

Best,

Joe

10/16/2012 12:40:14 PM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Ok. I understand problem - I have only parent page protected and child pages are not protected and search shows me unprotected child pages in this case. Thanks.

About markers - here samples:

  • ListItem1
  • ListItem2

With new version I found that when this List is inside text, then markers before items missed, but when I put items without text, markers showed without problems. Very strange, but downgrade to old version fixed this issue.

 

10/16/2012 12:47:17 PM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

Whether unordered lists (ie ul and li elements) show an icon is purely a CSS issue I don't see how the mojoPortal version could make a difference unless you are using an updated, new, or different skin in the new version or unless you are talking about how it looks within the wysiwyg editors since those were also updated to new versions.

You should use Firebug or other browser tools to see what css rules are affecting your lists.

Hope that helps,

Joe

10/17/2012 5:22:41 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

I am not so familiar with css debug tools, but I found how to reproduce this bug -

Create test page with left,center and right panel html block and this bug visible only on the center panel html block. Left panel and Right panel do not have any problems.

I use skin, created with Artisteer 4.

10/17/2012 6:42:53 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Note: When I change skin to an default Artisteer 3.1 skin, then all looks as expected.

10/17/2012 8:39:03 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

It is not a bug in mojoPortal, I suppose you can call it a css bug but it is in your own custom skin css not in any skin that we ship. If it were reproducable in one of the skins we ship I would fix it.

To solve it you need to learn how to use browser tools. Joe Davis just posted a brief description of how to use the tools in Chrome browser on this thread

Hope that helps,

Joe

10/17/2012 9:37:35 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Ok. I think that if you can ship new version of mojoProject with skins recreated with Artisteer 4 then you can see this css bug.

10/17/2012 9:43:28 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

If you'd like to zip your .artx file and email it to me I'll take a look joe dot audette a g mail dotcom

 

10/17/2012 9:48:41 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Too many css bugs (with Artisteer 4 skins) for me with new version. With Google Chrome I get totally broken site design.

10/17/2012 10:13:25 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

Are you sure you have the very latest download of Artisteer 4?

On my machine the exported skin looks fine, I'm using Chrome. The edit links for center page content are a little dark but I can see them.

I could upload this skin to our demo site to make sure we are looking at the same thing?

Another person posted about a problem with a new Artisteer skin in Chrome on this thread and I can see it on his site but it doesn't happen with any of the Artisteer 4 designs I've been working with nor with the one you sent me on my machine.

Best,

Joe

10/17/2012 10:20:18 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

Also I uploaded an update to our skin exproter on 2012-10-15 that has a minor fix that affects menu layout in some designs, if you downloaded it before that you should go to your purchase history and download it again and drag it onto Artisteer to install it. Then try exporting again.

Best,

Joe

10/17/2012 2:21:22 PM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

When I was looking at your skin this morning I was confusing this thread with another one and was looking for a problem with the edit links (in the other thread the edit links were hidden by css ie color and background color being the same makes things invisible) but I realized just now that other than the Chrome problem (which I could not replicate) you mentioned a problem about the icons in the ordered list so I took another look and figured out what was causing the problem.

In one of our core css files we need to override those icons otherwise they appear in places we don't want them in the admin menu and other unordered lists but by mistake some artisteer specific selectors were in our core css file located at:

/Data/style/adminmenu/style.css

the problem part is like this:

div.mojo-tabs ul > li::before, .art-post ul > li::before, .art-textblock ul > li::before,
div.adminmenu ul.simplelist > li::before, .art-post ul > li::before, .art-textblock ul > li::before {
content: ''; display:block;}

and it needs to be replaced with this:

div.mojo-tabs ul > li::before,
div.adminmenu ul.simplelist > li::before {
content: ''; display:block;}

that will make the icons appear in your content in undoredered lists

After making css changes go to Administration > Advanced Tools > Design Tools > Cache Tool and click the button to reset the skin guid.

I'm making the same change in my copy to fix this for the next release.

Best,

Joe

10/18/2012 11:03:37 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

Update on the Chrome problem, strangely it doesn't happen on my local machine but I am able to produce the problem on my server.

I'm still investigating why this happens but so far it seems like the artisteer script is thinking that chrome is a phone. The problem goes away if you remove the script.responsive.js 

I'm still investigating and will post again if I figure out a better solution but for now you can remove that script from layout.master

Best,

Joe

 

10/18/2012 12:15:57 PM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Now 2.3.9.3 works fine (with Google Chrome too). Thanks!

10/18/2012 2:45:23 PM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

I found a better solution for the Chrome problem, you can restore the responsive script and just add this to the bottom of style-artisteer-overrides.css:

html.chrome.desktop #art-resp { display: none; }

I've updated the plugin again so it includes this by default.

Best,

Joe

You must sign in to post in the forums. This thread is closed to new posts.