1. Home
  2. Portal
  3. My users can access any community if they know the URL

My users can access any community if they know the URL

237127, modified 18 Years ago.
My users can access any community if they know the URL
New Member Posts: 2 Join Date: 10/31/07 Recent Posts
Hi!

I have a setup where the membership of communities are assigned by User Groups.
Now, when guests are logging in or for that matter users not in the to the community assigned user groups, they can still access all communities if they now the URL. To me this is a serious security issue.

Anyone got an idea how I can restrict access to communities that the user is not a member of?

thanks.//Felix
thumbnail
34461, modified 18 Years ago.
RE: My users can access any community if they know the URL
Liferay Master Posts: 546 Join Date: 8/8/07 Recent Posts
Hi,

Felix you will have to remove "Guest - View" from "Permissions" of any of your community pages. When adding a page a guest does always have the right to view a page. You have to go to "Manage Pages" - Select a page - "Permissions" - "Guest" - Remove "View". Unfortunately you cannot do this on your community itself.
32261, modified 18 Years ago.
RE: My users can access any community if they know the URL
Junior Member Posts: 62 Join Date: 2/1/07 Recent Posts
How do I remove this default behaviour of Guest have view rights everywhere? I'm going to run a site which has front page which is visible to everyone incl Guest, but the rest of the site (Image Gallery, Message Boards etc) are closed.

Regards,
Jimisola
thumbnail
146511, modified 18 Years ago.
RE: My users can access any community if they know the URL
Expert Posts: 459 Join Date: 9/13/07 Recent Posts
OK, I think for this sitation has been designed the area of the private pages, where no guest can access it... just put the public to the public area of the community and the real pages which have to be protected into the private area... You have then to solve the redirect after logi... But Thi can be done simply so, You put into the public community the pages above, which are only urls to Your pages in the private community - or handle it in some different way...

with regards, Archie...