Reputation: 417
Using Sitecore 8, build 3, MVC. I have a page (yourDomain.com\MustBeSecure) on a Sitecore 8 site and I do NOT want any users to access this unless they are in a specific security group ("sitecore\IhaveAccess").
I've looked into Content Editor for the item, clicked on the Security profile tab but believe that is for content editing.
Any help is appreciated on this.
///////// Update - Now working ///////// I should have noted we are using Active Directory with auto authentication. Per Martin's post I started looking @ Access viewer
** please note on these screen shots I overlay the actual names of the pages (and group name) to test-page and secure page (and IHaveAccess)**.
Thanks for the assistance!!
Screen Shot 3: default\Anonymous
Screen shot 4: Security / Details from Content Editor for page
Upvotes: 0
Views: 353
Reputation: 2096
Use Access Viewer to achieve that (Sitecore --> Security Tools --> Access Viewer).
Select default\anonymous
user (those are everyone who not logged in) then select your page, then click Assign and set Deny
permission (you would probably also consider setting that recursively with setting Inherintance also to Deny
).
Then pick up your role Sitecore\IHaveAccess
and repeat previous step with setting Allow
permission
And below is the screenshot of a dialog you get after clicking Assign button, there are actual permissions you set for the user / role, as well as inherritance.
Hope this answers your question.
Upvotes: 2