Tweaking Community Server Out of the Box
There's a couple of extra steps I take to tweak Community Server out of the box.
Tweak 1 Go to Control Panel > Administration > Membership > Manage Roles (Manage All Roles in CS 2.1). Add a new role named ResourceOwner and assign it to any user that is the owner of a resource like a blog. By default, Community Server won't show the Control Panel link to any user that's not a moderator or administrator. I use this role to give access to the Control Panel link to users like blog owners. Next, in the navigation section of SiteUrls.config, modify the controlpanel link to include the ResourceOwner role in roles.
<link name="controlpanel" resourceUrl="controlpanel" resourceName="controlpanel" roles="SystemAdministrator,BlogAdministrator,ForumsAdministrator,Moderator,GalleryAdministrator,FileAdministrator,ReaderAdministrator,MembershipAdministrator,ResourceOwner" />
Tweak 2 By default, the Web.config file in /ControlPanel allows any authenticated user access to the Control Panel. Change Web.config in /ControlPanel to the following:
<!-- Admin configuration -->
<configuration>
<system.web>
<authorization>
<allow roles="SystemAdministrator,BlogAdministrator,ForumsAdministrator,Moderator,GalleryAdministrator,FileAdministrator,ReaderAdministrator,MembershipAdministrator,ResourceOwner" />
<deny users="*" />
</authorization>
</system.web>
</configuration>
Tweak 3 In Community Server 2.1 Beta 1, Beta 2 and RC1, there is no Web.config file in the /ControlPanel/Reporting folder, so any authenticated user can access Reporting. Add a Web.config file to the /ControlPanel/Reporting folder with the following:
<configuration>
<system.web>
<authorization>
<allow roles="SystemAdministrator,BlogAdministrator,ForumsAdministrator,GalleryAdministrator,ReaderAdministrator,MembershipAdministrator,FileAdministrator" />
<deny users="*" />
</authorization>
</system.web>
</configuration>
Similar Posts
- Tightenting Community Server Control Panel Security
- Forms authentication and images/style sheets
- MagicAjax - Easy as 1, 2, 3
Comments
Terri on on 8.03.2006 at 7:35 PM
nice..
Rob Howard on on 8.04.2006 at 5:52 PM
I think you found a bug!
Send me an email - rhoward@telligent.com - with your mailing address and I'll send you a Community Server t-shirt! Also let me know what size you want :)