Skip to main content

Questions tagged [security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
72 views

Can we give Folder or Structure Group level Access to Users and Groups

Business Requirement is that they want to Restrict access to some Folders to particular Users, so basically different Users should see different Folders and corresponding Structure Groups only. Is it ...
Neelesh Raghuvanshi's user avatar
3 votes
1 answer
55 views

Version of Tomcat embedded with Tridion 8.5

One of our client's recent security scans has advised that only Tomcat v7.0.60 or later should be used. They have a purely Windows based implementation and don't use Tomcat for any of the web ...
Jonathan Williams's user avatar
1 vote
0 answers
25 views

Disabling SSLv3 for Tridion 8.5

A client of ours has run some security testing which flagged up that Tridion is still using SSLv3 in their Tridion 8.5 Production environment. They have asked whether SSLv3 fallback can be disabled. ...
Jonathan Williams's user avatar
0 votes
1 answer
42 views

Content Porting with permissions from a Publication [duplicate]

Is it possible to export/import security settings of a publication using Content Porter (I'm using Content Porter and SDL Tridion 2013 SP1.1) I have tried exporting and importing a Publication Only ...
Dylan .. Mark Saunders's user avatar
7 votes
1 answer
244 views

Automatically logging out SDL Web 8 user from the CME after X hours

We have a custom SSO implementation that we are using to secure the SDL Web 8 CME. For the most part it is working quite well. However, for understandable security reasons our SSO provider needs to ...
Chris Summers's user avatar
1 vote
1 answer
52 views

Exporting permissions with Content Porter 2013 SP1

Content Porter allows export groups and rights, but I have a question. Can anyone tell me if you can export permissions on folders (read, write, localize, delete) using Content Porter? Thanks a lot.
kaiser1871's user avatar
2 votes
1 answer
133 views

Get a list of valid users and groups for for a specific component or page

I am building a custom UI for workflow assignment, and would like to be able to get a list of all users who can see my item in workflow so that I can reassign tasks to them (I don't want to assign a ...
Chris Summers's user avatar
5 votes
1 answer
65 views

How to implement/hack security on SmartTarget promotions?

We have a SmartTarget implementation where different business units will be managing promotions. They should not be able to see or edit each other's promotions. Judging by the SmartTarget ...
Will Price's user avatar
  • 16.4k
2 votes
4 answers
156 views

Restrict Publishing by User to Target in Same Publication

We want to restrict publishing for some content to some targets in one Publication. We have several Publication Targets within 1 Publication for a few web applications, including the main site. For ...
robrtc's user avatar
  • 10.2k
7 votes
3 answers
149 views

Disabling the Source tab in a Component

Is there a way to restrict the "Source" tab based on the Tridion security group. If so, what's the setting to disable it? We are trying to restrict editors from editing from the source
Robert Jin's user avatar
1 vote
1 answer
85 views

OOB authentication and authorization in Content Delivery

Most of the CMS product provide some out of box functionality of authentication and authorization at delivery side but is there any oob functionality in tridion which provides authentication and ...
rdhaundiyal's user avatar
  • 1,924
4 votes
2 answers
171 views

Allow only specific users to unlock Tridion components and pages

I would like to give specific team to unlock the components and pages locked by others. It should be restricted to only components and pages. Is there any way to do this without making them admins in ...
Patan's user avatar
  • 2,051
4 votes
1 answer
57 views

How can I (temporarily) restrict access to the system to a given user and/or group?

I wanted to check with you if by "disabling" an user I am removing his ability to log on to the system. I need to revoke access temporarily to different users (or groups) and wanted to know if there ...
Jaime Santos Alcón's user avatar
7 votes
1 answer
146 views

How to secure the CD Web Service and allow access to the token service?

I am using SDL Tridion 2013 SP1, and attempting to run the CD Webservice on Windows 2012 Server as a .NET Application. I have successfully installed the CD Web Service, and have successfully queried ...
Chris Summers's user avatar
-1 votes
2 answers
97 views

Best way to handle categories and keywords security for newly created category

I am implementing security as a per category basis for user groups. If we add new category in that case how we can handle automatic security. I mean is, I need to create security again on newly ...
Mahkar Singh's user avatar
4 votes
1 answer
115 views

How can give rights to users for individual activity in workflow based on user login..?

I have created the Workflow and in each activity I given the diffrent user groups so that only those users can do activities which are assigend to respective user groups. I did the same (created 3 ...
Nash's user avatar
  • 2,193
3 votes
1 answer
75 views

Which user should be used as the ECL PrivilegedUserName

Are there any security risks with using the MTSUSer? If so, what are the risks (and why)? The documentation says the following: Make sure the user specified in <PrivilegedUserName> has the ...
Chris Summers's user avatar
8 votes
2 answers
244 views

Setting permissions on multiple Categories

Is there a way in the GUI to set permissions on multiple Categories at once or will it require Core Service code (example)? I have to set about 40+ to set to all the same permission-set.
Neil's user avatar
  • 6,698
8 votes
3 answers
176 views

Is it possible to grant full Access Management ability without granting Admin?

I have a requirement where we need to create a Tridion group, let's call it "Limited Production Support", that can only administer users in Tridion. Their activities would be limited to: adding new ...
Nickoli Roussakov's user avatar
5 votes
1 answer
313 views

Security and Permissions

I came across a strange situation with SDL Tridion 2011 SP1. I have a user (non-administrator). This user has only Folder Management on a given publication. When I try to create a new component as ...
Husain Zahid's user avatar
  • 1,827
2 votes
2 answers
648 views

HTTP 404: File not found, reverting to mimetype

I am creating a Multimedia component using Default Multimedia schema in content explorer. When I select the image from disk then instead of image preview I see the error message HTTP 404: File not ...
Rajiv Kajal's user avatar
8 votes
3 answers
184 views

Permissions for ECL provider

I have a new ECL provider which works perfectly when logged in as an Administrator. When an Author logs in, they don't see the new mount point. Has anyone else seen this, and if so, what permissions ...
Chris Summers's user avatar
2 votes
1 answer
196 views

Change password feature in Tridion

Our content manager (2011 SP1) uses LDAP directory service for authentication. There are tridion editors who would use ONLY Tridion and nothing else. New users of this kind will not be able to login ...
Shiva's user avatar
  • 2,168
11 votes
3 answers
151 views

Restricting Content Porter functionality for some users

I have a bunch of users that have almost admin like access to most items with a bunch of SDL Tridion 2011 environments. The business would prefer that these users are not able to use the content ...
johnwinter's user avatar
  • 14.3k
5 votes
1 answer
783 views

500 error after enabling LDAP authentication on SDL Tridion 2011SP1

It is useful to point out that I've started out with a completely working SDL Tridion installation (HTTPS) after which I've decided to implement LDAP (directory service) authentication for Tridion. I'...
Bjørn van Dommelen's user avatar
14 votes
2 answers
260 views

What happens to assets created by a user when that user is deleted in Tridion?

What happens to the schemas, components, templates and pages, when the user who created them is deleted? What care should be taken while deleting a user in CMS?
Sunil Nadar's user avatar