Security Policies with DotNetNuke 4.5.5 / NukeEdit4

Last post 08-28-2007, 3:58 AM by Michael G. 2 replies.
Sort Posts: Previous Next
  •  08-27-2007, 1:21 PM 32944

    Security Policies with DotNetNuke 4.5.5 / NukeEdit4

    I have a few issues I need to work my way thru
    (1)   DotNetNuke Roles and related Security Policies
    I have settings in web.comfig specific to admin,registered and Guest.  IN DNN I have three defined roles - Administrators, Registered Users and Subscribers.   I'm assuming the  NukeEdit4 settings for  Guest apply to  Unregistered users - how do I set specific web.config settings for 'Subscribers' , as I want them to have  different settings to 'Registered Users'.

    (2) Access to Folders
    In admin.config ( and in the other .config files in Configuration\Security folder )  the relative path for manipulating the folder contents for images/flash/media is set to ~/uploads  .  This setting does not seem to take - using the Image Gallery for example gives the user access to the portal root.  Does 'uploads' refer to something defined elsewhere, or is it intended to be a folder name?
    Note in web.config I have set UseDNNRootImageDirectory=true .

    (3) Member Specific Folders
    How can I provide a member specific folder, and thereby prevent Registered Users for manipulating images uploaded by other registered users?

    Thanks in advance

    Michael



     

  •  08-27-2007, 2:43 PM 32953 in reply to 32944

    Re: Security Policies with DotNetNuke 4.5.5 / NukeEdit4

    Michael,
     
    A1:
     
    Please add the following entries to CuteEditor section of DNN web.config file:
     

               Subscribers_AutoConfigure = "Minimal"
               Subscribers_SecurityPolicyFile = "default.config"
               Subscribers_TemplateItemList = ""
               Subscribers_DisableItemList = ""
               Subscribers_AllowPasteHtml  ="true"
               Subscribers_EditorOnPaste  = "default"
               Subscribers_ReadOnly = "false"
               Subscribers_ShowBottomBar ="true"
               Subscribers_ShowHtmlMode  ="true"
               Subscribers_ShowPreviewMode  ="true"
               Subscribers_ShowTagSelector  ="true"
               Subscribers_EnableStripScriptTags  ="false" 
               Subscribers_EnableContextMenu    ="true"
     
    A2:
     
    If you set UseDNNRootImageDirectory=true in your web.config, Cute Editor will use the default DNN image gallery path.
     
    If you want to use the setting in the security configuration files, please set this property to false.
     
     
    A3:
     
    Cute Editor allows developers to assign a pre-defined set of permissions by group or individual.
     
    If you want to have this feature in DNN, you need to modify CuteEditor for DNN provider.
     
    Please check this example:
     

    asp.net Chat http://cutesoft.net/ASP.NET+Chat/default.aspx
    Web Messenger: http://cutesoft.net/Web-Messenger/default.aspx
    asp.net wysiwyg editor: http://cutesoft.net/ASP.NET+WYSIWYG+Editor/default.aspx
    asp wysiwyg html editor: http://cutesoft.net/ASP
    asp.net Image Gallery: http://cutesoft.net/ASP.NET+Image+Gallery/default.aspx
    Live Support: http://cutesoft.net/live-support/default.aspx

  •  08-28-2007, 3:58 AM 32977 in reply to 32953

    Re: Security Policies with DotNetNuke 4.5.5 / NukeEdit4

    Adam,
    Thanks for your response. 

    Could you please add some detail to the information provided
    .

    A1. DNN Roles & related Security Policies
    Given that Subscribers are also Registered users, what precedence rule does CuteEditor employ here in selecting the settings to use for any login which is both a Registered user and a Subscriber?

    A2. Access To Folders
    As stated my problem was that the relative path definition I specified ( I.E '~/uploads' ) did not take.  Your advise tells me how to set a path relative to Project Root.  The 'UseDNNRootImageDirectory=true' gets me into the 'portal root', not the project root.  So, I was asking  how to specify a sub-folder of the Portal Root as the folder  for the various galleries.

    WRT A3 :

    A3. member specific folders
    I can see the effect,  I saw this response in a different post, and ( similar to that entry ) I can see no information on 'how' in this URL.  I assume from the fact that I would have to modify the Cute Editor DNN provider that this is really beyond what is sensible for an installer.


    Thanks,

    Michael
View as RSS news feed in XML