Home » Support » Telligent Evolution Platform » Telligent Community » Discussions » Group permissions

Group permissions

Open Support Ticket

Call Support:
Direct: (214) 420-1337
Toll Free: (877) 522-6334

Monday through Friday
8 a.m. to 6 p.m. Central (GMT-6)

Join our Community
Details
  • 4 Replies
  • 0 Subscribers
  • Posted6 months ago
Options

Group permissions

This question is answered
jvictor
Posted by
on Tue, Dec 4 2012 6:21 PM

We have forms authentication on our Telligent 7.0 site. We have 3 groups, public, private listed, and private unlisted. We log out and are able to navigate to the public group URL with no issues. When we try the same for  the other 2 groups it redirects us to the login.aspx page. How can we enable navigation to all group pages regardless of the group type. Where is this redirect taking place. We have a customized the group landing page to hide/show digests base on whether the user is logged in and the group type so we want all request to the group URL to take users to get to the group landing page. Is that possible?
Verified Answer
  • Michael Monteleone
    Posted by
    on Tue, Dec 4 2012 9:58 PM
    Verified Answer
    Verified by

    The behavior that controls private group accessibility by unauthenticated users is not modifiable in a supportable way. Moreover, publicly displaying even just simple lists of names+links to private *unlisted* groups leaks data about them that would not otherwise be exposed by the platform, itself.

    However, in this scenario, I wonder if it would be possible for you to instead have a single content page on a public site which hosts your custom widgets. The external group listing links could all link to the same page with data about the intended group embedded within the querystring, and the custom page + widget could process that (and potentially redirect) in a similar manner as you are intending.
All Replies
  • Michael Monteleone
    Posted by
    on Tue, Dec 4 2012 7:33 PM

    Can you help me understand what scenario you are trying to build for? The design of private groups (both listed and unlisted) is such that they cannot be browsed by non-members.
  • jvictor
    Posted by
    on Tue, Dec 4 2012 7:52 PM

    On another site (not Telligent) users have access to a list of Telligent groups and the other site does not have any authentication. We expose the group name and URL via a service. When they click on the group name it should take them to the group landing page in Telligent. The widgets on the page figure out whether to display based on whether the user is already logged in. If the user is not logged in all we display is a custom group header and a button to join the group. The problem as I mentioned is clicking on the link behaves differently base on the group type when the user is not logged to the Telligent site. We use cookie authentication to determine if the user is logged in or not.
  • Michael Monteleone
    Posted by
    on Tue, Dec 4 2012 9:58 PM
    Verified Answer
    Verified by

    The behavior that controls private group accessibility by unauthenticated users is not modifiable in a supportable way. Moreover, publicly displaying even just simple lists of names+links to private *unlisted* groups leaks data about them that would not otherwise be exposed by the platform, itself.

    However, in this scenario, I wonder if it would be possible for you to instead have a single content page on a public site which hosts your custom widgets. The external group listing links could all link to the same page with data about the intended group embedded within the querystring, and the custom page + widget could process that (and potentially redirect) in a similar manner as you are intending.
  • jvictor
    Posted by
    on Wed, Dec 5 2012 1:53 PM

    I thought about that approach but I was hoping to avoid building the additional page. I had the same security concerns. Thank you much.