Setting exception to CMSAdmin rights

volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More.

volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More.

Home / Forums / Developers (Main Products) Forum / CMS 7.5 - 11 /

Setting exception to CMSAdmin rights

phil

Vote:

expand_less 0 expand_more

To my understanding all Users belonging to the roles set as CmsAdmins in the web.config can change and edit the "Set Access Rights" list. Is there's workaround for this? I would like admins to have rights to everything else but that and have a "Access Rights"-admin.

#175795

Mar 02, 2017 11:07

Erik Nordin Wahlberg

Vote:

expand_less 0 expand_more

I guess you could add a location path in web.config for /EPiServer/CMS/Admin/security.aspx. It will give them the login-screen though.

<location path="EPiServer/CMS/admin/security.aspx">
    <system.web>
      <authorization>
        <allow roles="MySuperDuperAdminRole" />
        <deny users="*" />
      </authorization>
    </system.web>
  </location>

#175797

Mar 02, 2017 12:03

phil

Vote:

expand_less 0 expand_more

Thanks a bunch, that will work as a solutions!

#175799

Mar 02, 2017 12:42

error This topic was created over six months ago and has been resolved. If you have a similar question, please create a new topic and refer to this one.