Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

The tag has no usage guidance.

3
votes
1answer
36 views

Version of Tomcat embedded with Tridion 8.5

One of our client's recent security scans has advised that only Tomcat v7.0.60 or later should be used. They have a purely Windows based implementation and don't use Tomcat for any of the web ...
1
vote
0answers
19 views

Disabling SSLv3 for Tridion 8.5

A client of ours has run some security testing which flagged up that Tridion is still using SSLv3 in their Tridion 8.5 Production environment. They have asked whether SSLv3 fallback can be disabled. ...
0
votes
1answer
26 views

Content Porting with permissions from a Publication [duplicate]

Is it possible to export/import security settings of a publication using Content Porter (I'm using Content Porter and SDL Tridion 2013 SP1.1) I have tried exporting and importing a Publication Only ...
7
votes
1answer
198 views

Automatically logging out SDL Web 8 user from the CME after X hours

We have a custom SSO implementation that we are using to secure the SDL Web 8 CME. For the most part it is working quite well. However, for understandable security reasons our SSO provider needs to ...
1
vote
1answer
48 views

Exporting permissions with Content Porter 2013 SP1

Content Porter allows export groups and rights, but I have a question. Can anyone tell me if you can export permissions on folders (read, write, localize, delete) using Content Porter? Thanks a lot.
2
votes
1answer
92 views

Get a list of valid users and groups for for a specific component or page

I am building a custom UI for workflow assignment, and would like to be able to get a list of all users who can see my item in workflow so that I can reassign tasks to them (I don't want to assign a ...
5
votes
1answer
60 views

How to implement/hack security on SmartTarget promotions?

We have a SmartTarget implementation where different business units will be managing promotions. They should not be able to see or edit each other's promotions. Judging by the SmartTarget ...
2
votes
4answers
123 views

Restrict Publishing by User to Target in Same Publication

We want to restrict publishing for some content to some targets in one Publication. We have several Publication Targets within 1 Publication for a few web applications, including the main site. For ...
7
votes
3answers
125 views

Disabling the Source tab in a Component

Is there a way to restrict the "Source" tab based on the Tridion security group. If so, what's the setting to disable it? We are trying to restrict editors from editing from the source
1
vote
1answer
72 views

OOB authentication and authorization in Content Delivery

Most of the CMS product provide some out of box functionality of authentication and authorization at delivery side but is there any oob functionality in tridion which provides authentication and ...
4
votes
2answers
147 views

Allow only specific users to unlock Tridion components and pages

I would like to give specific team to unlock the components and pages locked by others. It should be restricted to only components and pages. Is there any way to do this without making them admins in ...
4
votes
1answer
49 views

How can I (temporarily) restrict access to the system to a given user and/or group?

I wanted to check with you if by "disabling" an user I am removing his ability to log on to the system. I need to revoke access temporarily to different users (or groups) and wanted to know if there ...
7
votes
1answer
123 views

How to secure the CD Web Service and allow access to the token service?

I am using SDL Tridion 2013 SP1, and attempting to run the CD Webservice on Windows 2012 Server as a .NET Application. I have successfully installed the CD Web Service, and have successfully queried ...
-1
votes
2answers
89 views

Best way to handle categories and keywords security for newly created category

I am implementing security as a per category basis for user groups. If we add new category in that case how we can handle automatic security. I mean is, I need to create security again on newly ...
4
votes
1answer
108 views

How can give rights to users for individual activity in workflow based on user login..?

I have created the Workflow and in each activity I given the diffrent user groups so that only those users can do activities which are assigend to respective user groups. I did the same (created 3 ...
3
votes
1answer
70 views

Which user should be used as the ECL PrivilegedUserName

Are there any security risks with using the MTSUSer? If so, what are the risks (and why)? The documentation says the following: Make sure the user specified in <PrivilegedUserName> has the ...
8
votes
2answers
231 views

Setting permissions on multiple Categories

Is there a way in the GUI to set permissions on multiple Categories at once or will it require Core Service code (example)? I have to set about 40+ to set to all the same permission-set.
8
votes
3answers
163 views

Is it possible to grant full Access Management ability without granting Admin?

I have a requirement where we need to create a Tridion group, let's call it "Limited Production Support", that can only administer users in Tridion. Their activities would be limited to: adding new ...
5
votes
1answer
276 views

Security and Permissions

I came across a strange situation with SDL Tridion 2011 SP1. I have a user (non-administrator). This user has only Folder Management on a given publication. When I try to create a new component as ...
2
votes
2answers
540 views

HTTP 404: File not found, reverting to mimetype

I am creating a Multimedia component using Default Multimedia schema in content explorer. When I select the image from disk then instead of image preview I see the error message HTTP 404: File not ...
8
votes
3answers
140 views

Permissions for ECL provider

I have a new ECL provider which works perfectly when logged in as an Administrator. When an Author logs in, they don't see the new mount point. Has anyone else seen this, and if so, what permissions ...
2
votes
1answer
183 views

Change password feature in Tridion

Our content manager (2011 SP1) uses LDAP directory service for authentication. There are tridion editors who would use ONLY Tridion and nothing else. New users of this kind will not be able to login ...
11
votes
3answers
137 views

Restricting Content Porter functionality for some users

I have a bunch of users that have almost admin like access to most items with a bunch of SDL Tridion 2011 environments. The business would prefer that these users are not able to use the content ...
5
votes
1answer
729 views

500 error after enabling LDAP authentication on SDL Tridion 2011SP1

It is useful to point out that I've started out with a completely working SDL Tridion installation (HTTPS) after which I've decided to implement LDAP (directory service) authentication for Tridion. I'...
13
votes
2answers
238 views

What happens to assets created by a user when that user is deleted in Tridion?

What happens to the schemas, components, templates and pages, when the user who created them is deleted? What care should be taken while deleting a user in CMS?