HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Help with permissions

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#79051 (In Topic #16125)
Avatar

Fan in training

Need Help with permissions

Hello everyone,

I am having a problem with a few permission problems on our site.

One of our side blocks, side_root_galleries block, which we have on the front page.

Unregistered users to the site, will click on the links in this section (which registered users use to get to the gallery of their choice quickly) and it will do the following:

An Error Has Occured
The requested page (tease) is missing

It will then proceed to list a site map, that ANY user can click on the links.  Now most of them are locked down and it just gives them a login page, but a few of them, such as the Polls, it is allowing them to see usernames, and comments, as well as who is logged in. (which we would also like to know how to hide from unregistered users)


Any suggestions?
Back to the top
 
Posted
Rating:
#79052
Avatar

Community saint

Go to Security->Permissions Tree Editor and remove guest access for the following modules in the Welcome Zone: authors, contactmember, groups, members and onlinemembers. I think that is all that need to have permissions removed for the Guest account.

Bob
Back to the top
 
Posted
Rating:
#79062
Avatar

Fan in training

Thanks for the response.

It looks like this has partially worked, now rather than getting the error and the site tree, the system displays a blank page, which is much better.

However, guests are still able to see online users, news, and recent gallery and forum posts, even though they aren't logged in and these settings have been disabled for guests (already was)

I am more concerned about them viewing who is online than anything, and would hate to take this part of the site away completely, as it is something legitimate users use constantly for chatting with others.

Is there a way to have a plain, no content visible, login screen?  Then once logged in, then and only then it takes you to the welcome screen of the site?

Just wondering.
Back to the top
 
Posted
Rating:
#79063
Avatar

Community saint

Sure!

Admin Zone » Security » Permissions Tree Editor

Then untick 'Visibility' for Guests for 'Welcome' and/or 'Site' zones (depending on whether you've set it up as a single zone).

Of course, this will take your registered users directly to the login page, too, if their cookie has expired.

 :thumbs:

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Contract

Your name:
Your message: