Support forums - DotNetNuke 4.0 and Security

Support forums » Products » ASP.Net Image Gallery » Re: DotNetNuke 4.0 and Security

DotNetNuke 4.0 and Security

Last post 03-19-2007, 3:56 AM by gvb. 4 replies.


	Sort Posts: Previous Next

05-26-2006, 12:35 PM 19553

adamch25
Joined on 08-20-2004
Posts 3

DotNetNuke 4.0 and Security

Reply Quote

I have the DotNetGallery running perfectly under DNN 4.0 except for one minor security issue. I am setting the ShowUpload and ShowDescription to "false" in order for general users to not be allowed to upload photos, but when I login as admin or host these buttons are still hidden. The documentation says "You can set this property to false for general users and make sure only admin users have access". Is there another way to do this?

Adam

05-28-2006, 11:12 PM 19582 in reply to 19553

Adam
Joined on 09-23-2003
Aurora, ON
Posts 18,678

Re: DotNetNuke 4.0 and Security

Reply Quote

Adam,

Please open/modify the dotnetgallery module for DNN.

dotnetgallerymodule.ascx.

For example, you can detect the current user, if the current user is not, just set ShowUpload, ShowDescription property to false.

If CurrentUSer Is Not Admin Then

gallery1.ShowUpload= true

gallery1.ShowDescription=false

End If
</script>

asp.net Chat http://cutesoft.net/ASP.NET+Chat/default.aspx
Web Messenger: http://cutesoft.net/Web-Messenger/default.aspx
asp.net wysiwyg editor: http://cutesoft.net/ASP.NET+WYSIWYG+Editor/default.aspx
asp wysiwyg html editor: http://cutesoft.net/ASP
asp.net Image Gallery: http://cutesoft.net/ASP.NET+Image+Gallery/default.aspx
Live Support: http://cutesoft.net/live-support/default.aspx

03-16-2007, 5:44 AM 27460 in reply to 19582

gvb
Joined on 03-16-2007
Posts 2

Re: DotNetNuke 4.0 and Security

Reply Quote

How can I do this in .Net 1.1?

< % If CurrentUSer Is Not Admin Then gallery1.ShowUpload= false gallery1.ShowDescription=false End If %>

this doesn't work

Filed under: disable upload property

03-16-2007, 2:13 PM 27468 in reply to 27460

Adam
Joined on 09-23-2003
Aurora, ON
Posts 18,678

Re: DotNetNuke 4.0 and Security

Reply Quote

Gvb,

Please try the following code:

</script>

03-19-2007, 3:56 AM 27493 in reply to 27468

gvb
Joined on 03-16-2007
Posts 2

Re: DotNetNuke 4.0 and Security

Reply Quote

This is what worked for me.

script runat="server">

Public Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

If DotNetNuke.Security.PortalSecurity.IsInRoles("Administrators") Then

   gallery1.ShowUpload = true

   gallery1.ShowEditDescription = true

   gallery1.ShowHome = true

   gallery1.ShowUpload = true

Else

   gallery1.ShowUpload = false

   gallery1.ShowEditDescription = false

   gallery1.ShowHome = false

   gallery1.ShowUpload = false

End If

End Sub

< / script>

Filed under: disable upload webusers