Hello,

There are times when a user that does not have a host or admin account/role logs in and after doing a few things, they suddenly see the Admin or Host view of the page - they can see and interact with the module editing stuff.

Has anyone seen this sort of thing before?  Is there a solution?  Sometimes the users can log in/out and it fixes itself.  Other times that does not work at all.

Thanks for any help.

 - Will

leupold wrote do not grant registered users edit permissions on page level. Depending on the DotNteNuke version you are using, there might also be an issue with individual user permissions granted - if you assigned individual page permissions, I recommend to remove them.

Could you elaborate on this please? I've been using DNN for 2.5 years, and this is the first I've heard of this. And I have at least 100 users who have page-level edit access, and it would be unfeasible to change that. Thats the beauty of DNN, I thought, that it could do this. And now I hear there is a MAJOR security flaw with it? 

Can you point me to other threads on this? And is this a problem in all versions? I haven't been paying attention much to DNN for the last few months, so apparently I've missed something big.

So, you aren't saying that the problem the OP is having, where the admin menu sometimes shows for non-admin users, is something that is a known bug for users with page-level mod rights? Whew....