Portal - Contacts in proper web role still have Web Page edit access

(0) Share

Report

Posted on by Bryan Schmidt

I have configured a ADX Portal using 7.0.0022 on-premise and have created a new portal for our custom solution. I have contacts that want to be able to log into the portal so we setup the username and password for the contact. I configured a new web role for these users to remove permissions to edit page content. They should be able to add/update their own records within the portal but the page content edit controls keep showing up.

Created Website Access Permissions with all settings=NO. Also created Web Page Access Control Rule for "Restrict Read Access" trying to prevent the page content editing. I've read the documentation multiple times and followed the instructions but cannot get the permissions set correctly. Thoughts?

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (1)

Suggested answer

Nadeeja Bomiriya 6,804 on at

Like (0)

Report
Hi Bryan,

To troubleshoot the issue, I would do the following (you may have already done this).

Compare the OOTB Administrator and OOTB Authenticated User Web Roles

Compare the OOTB Administrator and your custom Web Roles

Compare the Website Access Permissions records (add all fields in Advanced Find to compare)

Assign a new contact to the Authenticated User Web Role, run IISRESET, close all browser windows, clear cache (browser) and try again.

Also, you can try removing the custom Website Access Permission record you created for your custom Web Role. Check if the contact you tested has multiple Web Roles.

Please let us know how you go.

Cheers,

Nadeeja

Was this reply helpful? Yes No
Craig P. Fleming 950 on at

Like (0)

Report

Nadeeja is on the right track here, an additional website access record is not required to deny access. You will want to closely inspect the webroles that the authenticated contact is a member of. If those appear to be correct then look at the associated web roles relationships to the default website access permission. For good measure also verify that you have not inadvertently assigned Accounts to webroles. This is a lesser used feature whereby the Account can be used rather than individual contacts. The contacts use the Parent Account relationship to assume the webrole assignment from the account.

Was this reply helpful? Yes No
Verified answer

Bryan Schmidt 25 on at

Like (0)

Report

Thanks for the tips Nadeeja. I did the comparison and the custom role I created were the same as what came out of the box for "Basic Portal" site. Still getting the fields to show. I started deactivating permissions to essentially take away permissions till I was able to get the controls to NOT display. Appears that removing the administrator Web Role resolved the issue. Even though it existed but was not hooked up, was causing the permissions to be elevated. Even though the Contact was not assigned on the Admin Web Role.

Now only have 1 Web Role for the user to look up their contact and edit.

Was this reply helpful? Yes No
Craig P. Fleming 950 on at

Like (1)

Report

Bryan is there any chance that you might have had the "authenticated users" checked on for the Administrators role? That would produce the results you are indicating. Removing the administrators role effectively disables the default security for the front side editing entirely which is ok unless you are expecting to use the front side CMS features.

Was this reply helpful? Yes No
Suggested answer

Naveen Ganeshe 3,397 User Group Leader on at

Like (0)

Report

I was also facing the same issue but after implementing the resolution told by Craig all the things are working perfectly.

Thanks, Craig

Was this reply helpful? Yes No