User can access protected content using "search" function

This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.

Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.

This is the place to report bugs and get support

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.
Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum.
This thread is closed to new posts. You must sign in to post in the forums.
10/15/2012 5:59:31 PM
Gravatar
Total Posts 22

User can access protected content using "search" function

Hello!

I have a mojoPortal 2.3.9.0 installed on Windows 7 (x64).

Not authenticated user can access protected content using "search" function.

Can anybody help me?

P.S. Tested with new mojoPortal 2.3.9.3 - same effect. Note: 2.3.9.3 version do not display marked list correctly (missed markers).

10/16/2012 9:31:19 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

I'm not able to reproduce this problem. Please be specific about what you mean by protected content.

If the page or feature instance is protected by roles then they should not appear in search results since the allowed roles are included in the search index and used to filter the search results.

If the page is marked as not included in the menu or hide form authenticated, that is not protected content because those ar enot security features they are only cosmetic settings.

If the content is really protected by roles and is appearing to unauthenticated users in the search results then probably something happended to the file system permissions that is preventing the index from being updated when roles permissions are changed. I would try rebuilding the index and make sure the files disappear from the index folder and then re-appear after they are re-indexed.

I also do not know what you mean by "marked list" and "missed markers", those are not terms I'm familiar with so please clarify what you mean by that.

Best,

Joe

10/16/2012 12:40:14 PM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Ok. I understand problem - I have only parent page protected and child pages are not protected and search shows me unprotected child pages in this case. Thanks.

About markers - here samples:

  • ListItem1
  • ListItem2

With new version I found that when this List is inside text, then markers before items missed, but when I put items without text, markers showed without problems. Very strange, but downgrade to old version fixed this issue.

 

10/16/2012 12:47:17 PM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

Whether unordered lists (ie ul and li elements) show an icon is purely a CSS issue I don't see how the mojoPortal version could make a difference unless you are using an updated, new, or different skin in the new version or unless you are talking about how it looks within the wysiwyg editors since those were also updated to new versions.

You should use Firebug or other browser tools to see what css rules are affecting your lists.

Hope that helps,

Joe

10/17/2012 5:22:41 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

I am not so familiar with css debug tools, but I found how to reproduce this bug -

Create test page with left,center and right panel html block and this bug visible only on the center panel html block. Left panel and Right panel do not have any problems.

I use skin, created with Artisteer 4.

10/17/2012 6:42:53 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Note: When I change skin to an default Artisteer 3.1 skin, then all looks as expected.

10/17/2012 8:39:03 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

It is not a bug in mojoPortal, I suppose you can call it a css bug but it is in your own custom skin css not in any skin that we ship. If it were reproducable in one of the skins we ship I would fix it.

To solve it you need to learn how to use browser tools. Joe Davis just posted a brief description of how to use the tools in Chrome browser on this thread

Hope that helps,

Joe

10/17/2012 9:37:35 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Ok. I think that if you can ship new version of mojoProject with skins recreated with Artisteer 4 then you can see this css bug.

10/17/2012 9:43:28 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

If you'd like to zip your .artx file and email it to me I'll take a look joe dot audette a g mail dotcom

 

10/17/2012 9:48:41 AM
Gravatar
Total Posts 22

Re: User can access protected content using "search" function

Too many css bugs (with Artisteer 4 skins) for me with new version. With Google Chrome I get totally broken site design.

10/17/2012 10:13:25 AM
Gravatar
Total Posts 18439

Re: User can access protected content using "search" function

Are you sure you have the very latest download of Artisteer 4?

On my machine the exported skin looks fine, I'm using Chrome. The edit links for center page content are a little dark but I can see them.

I could upload this skin to our demo site to make sure we are looking at the same thing?

Another person posted about a problem with a new Artisteer skin in Chrome on this thread and I can see it on his site but it doesn't happen with any of the Artisteer 4 designs I've been working with nor with the one you sent me on my machine.

Best,

Joe

You must sign in to post in the forums. This thread is closed to new posts.