Remove System Information Tab for certain roles

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

Please do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.

This forum is for discussing mojoPortal development

You can monitor commits to the repository from this page. We also recommend developers to subscribe to email notifications in the developer forum as occasionally important things are announced.

Before posting questions here you might want to review the developer documentation.

Do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.

This thread is closed to new posts. You must sign in to post in the forums.

6/21/2012 5:44:57 AM

damo

Total Posts 21

View Posts

Remove System Information Tab for certain roles

Hi,

Is there a clean way to remove the system information tab in the administration menu for certain roles other that removing it from the source code?

I notice in role permissions some functionality is switchable but I cannot find any where I can turn off access to the system information page.

6/21/2012 9:57:05 AM

Jamie E

Total Posts 1203

View Posts

Help support mojoPortal!
Add-on modules

Re: Remove System Information Tab for certain roles

Which roles do you want to hide it from? As far as I know, the only roles that can see that page are Administrators and Content Administrators. By definition both of those should only contain fully trusted users, and there's nothing all that secret on System Information.

6/21/2012 10:21:33 AM

damo

Total Posts 21

View Posts

Re: Remove System Information Tab for certain roles

Hi Jamie,

Thanks for the reply, i've been asked to remove it for the Content Administrators as the 'Admins' do not want the 'Content Admins' to know what server the portal is running on and apparently they will be able to figure this out from the operating system and asp.net info.....

Go figure???

Sometimes I wish I hadnt asked the reason why functionality needs to be changed!!........ I bet you do to now huh? :o)

I'm guessing the 'Content Admins' are FULLY trusted..... but not 100% trusted!!! ha ha!

I'm trying to think of a way of doing this simply without creating a new role for 'Slightly Untrusted Content Admins' or removing the button in the source code but I can't think of a way at the moment?

6/21/2012 10:30:28 AM

Jamie E

Total Posts 1203

View Posts

Help support mojoPortal!
Add-on modules

Re: Remove System Information Tab for certain roles

Well, the administration pages are physical aspx files, so you could always go the brute force method and remove or rename the Admin/ServerInformation.aspx page. You'd have to do this at each upgrade as well.

Jamie

6/21/2012 10:31:09 AM

Joe Audette

Total Posts 18439

View Posts

Re: Remove System Information Tab for certain roles

Hi,

There are 2 possible workarounds, the easiest might be to just hide the li element with css, you'd have to view the source and find out the id on the li element to make a css rule to hide it, then it could only be reached by direct url.

By default that link is only shown in the master site, so if you had a multi site installation it would not be shown in the child sites. I imagine your current site is already the master site but you could create a new site like admin.yourdonain.com then in the database change the new site to IsServerAdminSite = 1 in the new site and 0 in the current site in the mp_Sites table.

Hope that helps,

Joe

6/21/2012 10:31:57 AM

Jamie E

Total Posts 1203

View Posts

Help support mojoPortal!
Add-on modules

Re: Remove System Information Tab for certain roles

I just realized you could also make the file unreadable by IIS. That might be best because it would not be affected by upgrades.

Jamie

6/21/2012 11:00:19 AM

damo

Total Posts 21

View Posts

Re: Remove System Information Tab for certain roles

Thanks for the options guys, I think i'll try hiding it in css as I think the content admins are not going to type in the url if they don't know it exists. I think the admins want more of a preventative solution rather than a brute force lock out so I think hiding it should be enough for them.

Besides I would imagine the admins would want to use that page at some point so it probably wouldn't be best to remove it.

You must sign in to post in the forums. This thread is closed to new posts.