Forums Service Security

Posted by Community Admin on 04-Aug-2018 20:02

Forums Service Security

All Replies

Posted by Community Admin on 22-May-2012 00:00

Seems like permissions don't work correctly when using the service url for the forums module.
I have one forum group called moderators that I set permissions to moderators only for everything. The page with the widget shows the forums correctly, moderators group is hidden for non moderators and they can see all forums that are public

However typing in the service url /Sitefinity/Services/ForumsService.svc/ will show all forum groups if your logged in as a moderator or not. :(

filterQueriesByViewPermissions is also set to true...

Posted by Community Admin on 05-Jun-2012 00:00

Do i not understand the way permissions work, shouldn't permissions applied to a forum item also be applied to the exposed json service?

What about other SF modules, images, docs, etc?

This thread is closed