Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

$4.95 Windows Hosting at Webhost4life.com
  Ads  
Aspose - The .NET & Java component publisher
 


  Sponsors  

Meet Our Sponsors

FCKeditor Project
Salaro -- Skins and more
OnyakTech
CrystalTech Web Hosting™
Webhost4life, specialists in DNN hosting
Mad Development is a full service interactive agency focusing on the merge of design, technology, e-commerce, and affiliate marketing by providing total website solutions.
 


DotNetNuke Forums
 
  Forum  General DotNetN...  Extend It! ( Pr...  Changing Role Names
Previous Previous
 
Next Next
New Post 5/22/2008 4:06 AM
Unresolved
User is offline r_honey
133 posts
9th Ranked


Changing Role Names  

I have observed that DNN does not allow changing Role Names for Roles once created through the User Interface.

When I studied the underlying Stored Procedure, I observed that neither does the procedure supports so.

Is there any specific reason to disallow changing Role Names (Role Group Names are allowed to be changed however!!!)

For some reason, my modules require chaging Role Names after they have been created. Although I have coded the Sql & VB part of it (which was not very difficult), is there any kind of security or integration issue with the rest of DNN framework, if I am doing so through a custom module???

 
New Post 5/23/2008 7:24 AM
User is offline Dwayne Baldwin
520 posts
8th Ranked




Re: Changing Role Names  

If roles are stored in cookies they may affect security/permissions if they persist as different names (until they are reloaded). 

Don't quote me on this, as I don't recall how this mechanism works when one selects "remember login".


Dwayne J. Baldwin
 
New Post 5/23/2008 8:06 AM
User is offline r_honey
133 posts
9th Ranked


Re: Changing Role Names  

Then, there are 3 points I would like to know here:

1) What mechanism is used when someone selets "Remember Login"?

2) How can I configure DNN not to use cookies to persist security/permissions?

3) Even if DNN uses cookies to persist security information, how can I make DNN to reject all cookies & set them anew by asking the user to re-login after I have updated role names??? This should not be much of a problem, as obviously role names are not updated that often. However, if & when they do, it is important to expire all cookies, or else an unauthorized user may gain access to a restricted portion of the site, if the Role Names clash in some way after updation!!!

 
New Post 5/23/2008 9:14 AM
User is offline Dwayne Baldwin
520 posts
8th Ranked




Re: Changing Role Names  

1) I don't recall when DNN actually reloads permissions - during new logins or with remembered logins.

2) DNN permissions depend on cookies during the session, and persist with remember login. (Depending on the length of the role names, we discovered that about 50 roles seemed to reach the storage limits of a cookie.)

3) I suppose you could force the cookie to expire like a regular login.

As for clashing, that is why role names cannot change in the first place.

I hope this is of some help to you.


Dwayne J. Baldwin
 
New Post 5/23/2008 9:44 AM
User is offline r_honey
133 posts
9th Ranked


Re: Changing Role Names  

I saw a table UsersOnline that is used by DNN. If I clear that table after Role Updation, would that Logout all users???

How does DNN decide which users are logged in when it shows the appropriate icon on Admin User Management Page. If there is a IsOnline value somewhere in the DB, I can clear that. Or Else, I can clear out the UsersOnline table. Would that resolve the issue???

Can I hook into the DNN Login procedure. That way, after I update a Role, I can set some Flag myself, & clear the cookies if that flag is set, thus requiring users to relogin after Role Updation???

 
Previous Previous
 
Next Next
  Forum  General DotNetN...  Extend It! ( Pr...  Changing Role Names
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

 


WEBPC™ DotNetNuke® sites for Small Business
WEBPC™ are internet consultants and web hosters catering to the small business market.
www.webpc.biz
Perpetual Motion Interactive Systems Inc.
A solutions company specializing in Microsoft enterprise technologies.
www.perpetualmotion.ca
Icthus Technologies
Building Faith on the Internet
www.icthustech.com

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP