WebAdmins can see, edit and create Visitor groups but they can't

WebAdmins can see, edit and create Visitor groups but they can't delete them?

Tim Schmelter

Vote:

Hello,

our customer failed to delete his Visitor group. When he tried it a login popup apppeared. I can delete them without problem(in Admin group).

He said that he probably never tried it before, so maybe it was always so, is this by design? What i had to do if i wanted to support deleting visitor groups for WebAdmins?

These are the configured role providers:

<roleManager enabled="true" defaultProvider="MultiplexingRoleProvider" cacheRolesInCookie="true">
	<providers>
		<clear />
		<add name="MultiplexingRoleProvider" type="EPiServer.Security.MultiplexingRoleProvider, EPiServer.Framework.AspNet" provider1="SqlServerRoleProvider" provider2="WindowsRoleProvider" providerMap1="SqlServerMembershipProvider" providerMap2="WindowsMembershipProvider" />
		<add name="WindowsRoleProvider" applicationName="/" type="EPiServer.Security.WindowsRoleProvider, EPiServer.Cms.AspNet" />
		<add name="SqlServerRoleProvider" type="System.Web.Providers.DefaultRoleProvider, System.Web.Providers, Version=2.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" connectionStringName="******" applicationName="/" />
	</providers>
</roleManager>

These are the virtual roles:

<virtualRoles addClaims="true">
	<providers>
		<add name="Administrators" type="EPiServer.Security.WindowsAdministratorsRole, EPiServer.Framework" />
		<add name="Everyone" type="EPiServer.Security.EveryoneRole, EPiServer.Framework" />
		<add name="Authenticated" type="EPiServer.Security.AuthenticatedRole, EPiServer.Framework" />
		<add name="Anonymous" type="EPiServer.Security.AnonymousRole, EPiServer.Framework" />
		<add name="CmsAdmins" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebAdmins, Administrators" mode="Any" />
		<add name="CmsEditors" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebEditors" mode="Any" />
		<add name="Creator" type="EPiServer.Security.CreatorRole, EPiServer" />
		<add name="PackagingAdmins" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebAdmins, Administrators" mode="Any" />
	</providers>
</virtualRoles>

Someone can shed some light on it on how it works and what i have to change to support deleting Visitor groups for WebAdmins?

#252604

Edited, Apr 07, 2021 8:57

Johan Petersson

Vote:

Hi, there is a virtual role called VisitorGroupAdmins you can configure. I believe you need to be a member of this role to able to delete Visitor Groups. You are probably member of this role since it's mapped agains CmsAdmins by default.

#252706

Edited, Apr 08, 2021 10:17

Tim Schmelter - Apr 08, 2021 11:01

Thanks. But you see in my configuration above that WebAdmins are already part of CmsAdmins which you say that VisitorGroupAdmins is mapped against. Or did i misunderstand it?

Johan Petersson

Vote:

Ok, you can't post code in comments.

I'm not sure on that part. But you can easily test this by just adding the role:

<add name="VisitorGroupAdmins" type="EPiServer.Security.MappedRole, EPiServer.Framework" roles="WebAdmins" mode="Any" />

#252710

Apr 08, 2021 11:05

Tim Schmelter - Apr 19, 2021 15:08

I've tried that but unfortuanately it didn't work. You see still the login dialog if you try to delete a visitor-group. I have just added that provider in the web.config as you have shown.

Try our conversational search powered by Generative AI!

WebAdmins can see, edit and create Visitor groups but they can't delete them?