-
I noticed that I can access any files under /filestorage/… even if I am not logged in to a CS-site. How do I make sure that a user that is NOT logged in does not have access to any of the site's files or content? Thanks! Andreas Sjostrom
-
Thanks! I'm trying to find the setting… Can you help me? Best, Andreas Sjostrom
-
I have the following in the web.config: <location path=""> <system.web> <authorization> <allow roles="Registered Users" /> <deny users="?" /> </authorization> </system.web> </location> … but anon users can still get to content files. Why? BR, Andreas Sjostrom
-
Thanks, Alex! I am a bit concerned, though. The site is locked down for a reason. We are even turning of "Join"-functionality. Only pre-created accounts are welcome. The site's content is strictly confidential. I would not sleep well at night if I knew that the content could be retrieved by anyone. Given that Community Server is quite popular, it's not too problematic to anonymously get to the …/filestorage/… path structure and then just hack away on filenames. How can I close
-
Thanks! A side note to this is that CommunityServer does not show the banner image to the user not logged on. Instead, the image appears as a broken image. Not until the user has logged, then the banner image is shown. The url to the image as found under Site Admin is: ~/cfs-file.ashx/__key/CommunityServer.Components.SiteFiles/banner.jpg How do I show the banner image to users not logged in and how do I make Community Server not show the menu bar to users that are not logged in? BR, Andreas
-
tre
-
zczxc
-
l1
-
l2