7 votes
Accepted

Version of Tomcat embedded with Tridion 8.5

There is a hotfix that updates all microservices to use Tomcat version 8.5.13. - see http://csei.sdl.com/hotfixes/#/hotfixes/c, and search for hotfix CD_8.5.0.4115 I'm not sure if the CM uses some ...
user avatar
7 votes
Accepted

How to secure the CD Web Service and allow access to the token service?

It seems like I missed this step in the manual: <ExcludedPaths> <Path>/access_token.svc/</Path> </ExcludedPaths> In the ADF config file
user avatar
7 votes
Accepted

Allow only specific users to unlock Tridion components and pages

There's no other way out-of-the-box, but you could create your own solution (e.g. a Custom Page) which exposes this functionality to the right people. Behind the scenes it then needs to impersonate an ...
user avatar
  • 19.8k
6 votes
Accepted

OOB authentication and authorization in Content Delivery

Audience Manager is a subscription management tool which will allow visitors to manage their email subscriptions with your organization. I've seen many clients abuse this to double as an identity ...
user avatar
5 votes
Accepted

Automatically logging out SDL Web 8 user from the CME after X hours

There will be two step process: Create javascript file which can detect idle time. Refer following link for this implementation: Detect idle time in javascript Load this javascript in ...
user avatar
  • 3,728
4 votes
Accepted

Can we give Folder or Structure Group level Access to Users and Groups

Yes, this permission granularity is something that Tridion provides out of the box. For example, the screenshot below shows the permissions for the 800 Author group on a specific folder: You can set ...
user avatar
4 votes

Disabling the Source tab in a Component

You can make a basic GUI Extension for your components (there are some guides to do this) Then in the js of your extension the code that you need could be something like that: if (Tridion.UI....
user avatar
4 votes
Accepted

Exporting permissions with Content Porter 2013 SP1

It is non-exportable properties, see: docs
user avatar
4 votes

How can I (temporarily) restrict access to the system to a given user and/or group?

Two things spring to mind (I'm sure there are more!): You need to be careful that by disabling users that you do not 'block' items that are going through Workflow. This may be a problem if, for ...
user avatar
2 votes

Allow only specific users to unlock Tridion components and pages

Depending on the locks being accidental or intentional you might try programmatically unlocking on a fixed schedule (like 04:00). If people lock items for a purposes you would not want them unlocked (...
user avatar
2 votes

Restrict Publishing by User to Target in Same Publication

The answer you probably don't want to hear is, "Port those structure groups and pages to a separate publication!" ;)
user avatar
2 votes

Get a list of valid users and groups for for a specific component or page

I have implemented the same type of feature in my project. Here are the steps that I have followed - First read the all the tasks from that workflow process. Then read the group involved in that ...
user avatar
2 votes

How to implement/hack security on SmartTarget promotions?

This was pretty easy to achieve with a GUI Extension Data Extender, which filtered the lists of regions and promotions sent from the CMS to the SmartTarget GUI. I used normal Tridion Group ...
user avatar
  • 16.4k
1 vote

Restrict Publishing by User to Target in Same Publication

The best OOTB solution would be to use Tridion security and educate the users. Custom resolver, like you highlighted, is another technical solution that would work really well. You could also create ...
user avatar
  • 2,148
1 vote

Restrict Publishing by User to Target in Same Publication

I would have used Publication Metadata to configure which items should go where. You can enable "key-value" pairs via metadata schema to specify which target should pick up which SG or items from an ...
user avatar
1 vote

Restrict Publishing by User to Target in Same Publication

Another approach that can be used is event system where you can capture publish transaction verify the structured group and decide whether to publish or not. The reference for such implementation is ...
user avatar
  • 3,728
1 vote

Disabling the Source tab in a Component

In addition to the information provided by Julián above, we recently used the following Anguilla code to disable the 'Source' tab on Tridion 2013 SP1 (Where we are supplying the tab id, rather than ...
user avatar
1 vote

Security and Permissions

This behaviour is by design. The various rights act directly on the item types they are named for. The behaviour you have seen is a bit strange, but that is caused by configuring a strange combination ...
user avatar
  • 18.5k

Only top scored, non community-wiki answers of a minimum length are eligible