Sitecore安全问题

Question

我们网站的不同区域已锁定到特定用户.因此,例如,作为sitecore角色"UK_Editor"成员的用户可以查看所有其他国家/地区的内容(他们只有读取权限).但是,在英国地区,他们可以完全访问.

问题是,用户仍然可以转到其他国家/地区的内容,并且"发布"按钮仍然可用.

有没有办法限制这个？

Sitecore v:6.5.0

Answer 1

您可以测试启用Publishing.CheckSecurity配置设置,以防止用户能够使用应用的正确角色发布其他网站内容.

       <!--  PUBLISHING SECURITY
        Check security rights when publishing?
        When CheckSecurity=true, Read rights are required for all source items. When it is
        determined that an item should be updated or created in the target database,
        Write right is required on the source item. If it is determined that the item
        should be deleted from target database, Delete right is required on the target item.
        In summary, only the Read, Write and Delete rights are used. All other rights are ignored.
        Default value: false
  -->
        <setting name="Publishing.CheckSecurity" value="true" />