Roles or Groups for site users

[aruss]

Can I assign roles to site users or assign users to groups so I can restict access to pages for specific roles or user groups?

Cheers
aruss

[kooboo-jifeng]

Hi

Haven't this feature right now.

But we plan to make a permission tab on the page to customize:

1. Which user/role can (inline)edit this page.
2. Which user/role can visit this page.

[aruss]

Ok, thanks.

So then you will need to prevent users with "front end" roles from accessing the admin panel.
I noticed that if the user is authenticated but has no roles for backend he still can access the admin panel and see the page structure do couple commands.

I prevented it by rewriting AuthorizeCore method in AuthorizationAttribute

protected virtual bool AuthorizeCore(RequestContext requestContext)
{
    if (requestContext.HttpContext.User.Identity.IsAuthenticated)
    {
        if (Kooboo.CMS.Sites.Services.ServiceFactory
            .UserManager.IsAdministrator(requestContext.HttpContext.User.Identity.Name))
            return true;

        if (!RequiredAdministrator)
        {
            var roles = Kooboo.CMS.Account.Services.ServiceFactory
                .RoleManager.All().Select(s => s.Name).ToArray();
            return IsInAnyRole(requestContext.HttpContext.User, roles); 
        }
    }

    return false; 
}

[kooboo-jifeng]

@aruss Thanks, I have reproduced the issue.

[kooboo-jifeng]

It is the membership feature, main features:

1. Member management.
2. Page permission setting for member.
3. Connect to OAuth provider such like: Facebook, twitter, g+ etc.