News module , search function and security settings

This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.

Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.

This is the place to report bugs and get support

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.
Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum.
This thread is closed to new posts. You must sign in to post in the forums.
10/28/2008 8:47:56 AM
Gravatar
Total Posts 88

News module , search function and security settings

Hello,

Only "Approved Users" (a new role I set up) should be able to view any pages of my site other than the Home page. I am just testing this, and as an un-approved user I used the search function to search for content. I found that if I search for items on the News pages, results are returned. I implemented a News page and sub-pages using the Blog module. The page containing the module itself has security set to "Approved Users only can view this page", but I can't see a way to do this for the detailed pages that sit below (i.e. if you click on a blog entry to get the full content) . I'd have thought there'd be a global setting across the Blog module? Anyway, this is a bit of security issue as some of the content on the blog pages is visible in the search results descriptions even though I only want Approved Users to be able to view them. Can you advise what I need to do to enforce the security on the blog pages?

Thanks,

Leah

10/28/2008 8:59:19 AM
Gravatar
Total Posts 18439

Re: News module , search function and security settings

A user either has permission to see the page that contains the blog module or not. If they do have permission then they can see all posts there is no post level security. Users who do not have permission to see the page the blog module is on should not be able to see any of the blog posts in search. If you are saying they do and its a reproducable bug I'll look into it. However, in general I don't think any feature that exposes rss should be considered very secure. If you have tight security requirements I would not recommend using a blog. I mean maybe we can implement an option to disable the rss but by nature blogs are designed to be published to the public.

Best,

Joe

10/28/2008 9:44:21 AM
Gravatar
Total Posts 88

Re: News module , search function and security settings

Hi Joe,

I see what you are saying. I have actually tried to reproduce it and I think somehow one of my blog entries corrupted. This is because, producing a new blog item with exactly the same text and content (but different url), works as expected i.e. does not appear in search. However my original entry keeps appearing in the search, and if I click on the "read more" the page goes blank rather than display the rest of the content. So somehow it's gone wrong. I will just delete that one and create a new entry.

As to the security, it doesn't need to be super-tight in that it is a community website for my housing estate, it's just we don't want non-residents to be able to access the site.

 

Thanks,

Leah

10/28/2008 9:47:26 AM
Gravatar
Total Posts 18439

Re: News module , search function and security settings

I just added a new setting to the blog in my local copy that allows disabling the feed, so that will be an option in the next release.

You could try deleting the search index and rebuild it. Just backup the files in /Data/Sites/1/index and then delete them and do a search and it will rebuild the index.

Best,

Joe

10/28/2008 9:58:39 AM
Gravatar
Total Posts 88

Re: News module , search function and security settings

Thanks, rebuilding the site index worked a treat!

You must sign in to post in the forums. This thread is closed to new posts.