9

Yes - it is possible to do what you want, but not in the way you describe. Assuming that the groups are created/configured by a Tridion system administrator, you can manage all of those things in an external directory using Tridion's LDAP integration functionality. Taking your requirements in turn: Adding new users Ensure that Group synchronisation is ...


9

There is no way to do this in the standard GUI, however, please see my blog article on the subject, where I show how to do this from a relatively straightforward Powershell script. With some boilerplate code in place, the script to set permissions on a category ends up looking like this: $catPermsTest = $core.Read("/webdav/01%20Definitions/PermsTest", $...


8

AFAIK, there is no straight forward way to do so in GUI, you may need to write a Core Service code for it.


7

There is a hotfix that updates all microservices to use Tomcat version 8.5.13. - see http://csei.sdl.com/hotfixes/#/hotfixes/c, and search for hotfix CD_8.5.0.4115 I'm not sure if the CM uses some Tomcat version internally. I know it uses Solr for Search, but i don't think that uses Tomcat.


7

It seems like I missed this step in the manual: <ExcludedPaths> <Path>/access_token.svc/</Path> </ExcludedPaths> In the ADF config file


7

There's no other way out-of-the-box, but you could create your own solution (e.g. a Custom Page) which exposes this functionality to the right people. Behind the scenes it then needs to impersonate an administrator user to do the actions.


6

Audience Manager is a subscription management tool which will allow visitors to manage their email subscriptions with your organization. I've seen many clients abuse this to double as an identity management solution but it is not intended as one so I would not advise this as a stable, production grade solution. You can use .Net built-in authentication and ...


5

You should not give these user groups Workflow Management Rights. Also, make sure that these groups are independent (they all may be members of Authors group, for example).


5

There will be two step process: Create javascript file which can detect idle time. Refer following link for this implementation: Detect idle time in javascript Load this javascript in tridion. Refer following link for this implementation: Load javascript file without any GUI references When idle time goes beyond the limit that you specified, ...


4

Yes, this permission granularity is something that Tridion provides out of the box. For example, the screenshot below shows the permissions for the 800 Author group on a specific folder: You can set this for individual users as well as groups. However, best practice is to set permissions such as this on a group level and then add users to groups. As well ...


4

You can make a basic GUI Extension for your components (there are some guides to do this) Then in the js of your extension the code that you need could be something like that: if (Tridion.UI.UserSettings.getJsonUserSettings(true).User.Data.GroupMemberships.Group) { if (Tridion.UI.UserSettings.getJsonUserSettings(true).User.Data....


4

It is non-exportable properties, see: docs


4

Two things spring to mind (I'm sure there are more!): You need to be careful that by disabling users that you do not 'block' items that are going through Workflow. This may be a problem if, for example, you disable all of the users in a particular group that are needed to approve content. You may also need to keep in mind that although you have disabled a ...


3

You can use the MTSuser, that will work. Some considerations The privileged user will create Tridion items: the ECL schema, stub folders and stub compontents. Maybe you don't want te MTSuser to create any items. ECL does not need MTSuser access, so why grant it this special superadmin rights? The MTUser has a lot of access, do you trust your ECL provider ...


3

Apart from @Nuno answer, I want to add one more suggestion. Create a Core Services Page for Production Support Department which should allow Adding new users Assigning users to existing groups Enabling/disabling users Restrict this page with a specific user group access, so that no other user can misuse this page.


3

Unfortunately this is not possible OOTB. You may need to create a separate UI for user/group management - good candidate for a power tool IMHO.


2

Depending on the locks being accidental or intentional you might try programmatically unlocking on a fixed schedule (like 04:00). If people lock items for a purposes you would not want them unlocked (even by an admin). Note that "unlocking" comes in two flavors: checkin or cancel checkout. Accidental locks should normally be cancelled but incidental ones ...


2

The answer you probably don't want to hear is, "Port those structure groups and pages to a separate publication!" ;)


2

I have implemented the same type of feature in my project. Here are the steps that I have followed - First read the all the tasks from that workflow process. Then read the group involved in that tasks. After that from Group read the list of users. Hope this will help you.


2

This was pretty easy to achieve with a GUI Extension Data Extender, which filtered the lists of regions and promotions sent from the CMS to the SmartTarget GUI. I used normal Tridion Group membership with specially named groups to manage the set of region prefixes that a given user was allowed to work with. Full details of the implementation are found in ...


1

The best OOTB solution would be to use Tridion security and educate the users. Custom resolver, like you highlighted, is another technical solution that would work really well. You could also create new publication inheriting this publication with all of your structure groups (much like a master reference website implementation) and disable publishing at ...


1

I would have used Publication Metadata to configure which items should go where. You can enable "key-value" pairs via metadata schema to specify which target should pick up which SG or items from an organizational item like folder. Something like: Target A tcm123;tcm345 After adding this metadata to publication, you can either use event system to validate ...


1

Another approach that can be used is event system where you can capture publish transaction verify the structured group and decide whether to publish or not. The reference for such implementation is available at: Do no publlish


1

In addition to the information provided by Julián above, we recently used the following Anguilla code to disable the 'Source' tab on Tridion 2013 SP1 (Where we are supplying the tab id, rather than the position): $display.getView().properties.controls.TabControl.disableItem('SourceTab');


1

AFAIK, there is no way implementing security on multiple categories. BUT you can make it automated (while creating a category) by using the Event System to implement security.


1

This behaviour is by design. The various rights act directly on the item types they are named for. The behaviour you have seen is a bit strange, but that is caused by configuring a strange combination of rights. Usually you have Folder Management and Component Management together - the people who work with components need to be able to manipulate folders too....


1

Can you confirm you've excluded the paths as noted here: http://sdllivecontent.sdl.com/LiveContent/content/en-US/UIU4SDLT2011SP1/concept_59979CAA10334D61979C34C85FA7703A [login required] Can you confirm if there's anything output to the logs/event logs (did you already switch on default to debug and set TRACE on).


1

The preview will display the thumbnail of an image e.g jpg, gif, png as the browser can physically render those, if you're uploading for example a pdf, the pdf 'multimedia type' is by default created in the cms, so it will use the pdf icon instead. I suspect you are attempting to load a file that is based on an extension that isn't configured in the CMS, if ...


Only top voted, non community-wiki answers of a minimum length are eligible