Sitecore Security Overview
Download as PPTX, PDF1 like939 views
This document provides an overview of Sitecore security concepts and interfaces. It discusses users and roles, and how access rights can be assigned to both. It also covers domains, and how security can be applied globally or locally within a domain. The document outlines how security inheritance works for content items and workflows. It describes security interfaces like the user manager, role manager, and domain manager. It also discusses planning security for features and websites, and integrating with external user repositories.
Sitecore Security Overview
- 2. Glen McInnis Vice President Nonlinear Creations Inc. glen@nonlinear.ca
- 3. 01 Overview 03 User Repositories Non-Sitecore 04 Planning Security 02 Security Interfaces Administrator’s Guide toSitecore
- 4. Sitecore Security Concepts • Users. A user account in Sitecore contains details about the user name, domain, email, and password. You can (but should not) assign access rights directly to a user account. • Roles. A collection of users or a collection of users and other roles. You can use roles to assign access rights to groups of users by making them a member of a role. • Domains. a collection of security accounts (users and roles) that you can administer as a unit with common rules and procedures
- 5. Domains • Default domains: • Sitecore – contains CMS users (content authors) • Extranet – users of the published site • Default – used when no other domain can be resolved • Each domain contains an Everyone role and an Anonymous user. • Sitecore determines the domain from the context site.
- 6. Domain Scope • Global domains - users are able to access all the domains in the system. • Locally managed domains – users can only access a specific domain. A local administrator usually maintains a locally managed domain. Users that belong to a locally managed domain will only see security accounts that belong in the same domain.
- 7. Application of Security to Content Authors – Content and Workflow • Security can be set for content items by role (recommended) or user (not recommended). • Security inherits to descendant content until inheritance is broken. • Ability to act on an item is determined by the item security as well as the security set on the current workflow state.
- 8. Application of Security to Content Authors – Features • Sitecore has built in roles named “Sitecore Client *” that grant or limit access to Sitecore features. • Any content author must be a member of Sitecore Client Authoring • Sitecore “administrator” should be granted sparingly.
- 9. Security and Website Visitors • Visitors to the website are in the “extranet” domain. If users are not logged in they are “extranetanonymous”. • Any security applied to content items will affect the availability and visibility of content on the site for visitors. • This allows for the creation of secure content. Common scenarios are member’s only or premium paid content as well as general portal functionality.
- 10. ADMINISTRATOR’S GUIDE TO SITECORE SECURITY INTERFACES
- 11. User Manager
- 12. Role Manager
- 13. Domain Manager *
- 14. Security Editor
- 15. Access Viewer
- 17. Authenticating with other User Directories • Sitecore implements the ASP.NET security provider model. You can roll your own implementation to connect to your source. • Active Directory Module is supported by Sitecore. Various others exist on the Sitecore Marketplace.
- 18. Common User Repositories • Active Directory, ADFS • CRM: Dynamics, Salesforce • AMS: Personify, Aptify • Ecommerce: Insite, Commerce Server
- 20. Sitecore Security • Interaction between item security, inheritance and workflow security requires consideration during site IA planning. • Item A • Item B • Item C
- 21. Sitecore Feature Access • Decide which users can access features. There are over 35 built in roles, but start with basics. • Publication: Sitecore Client Publishing • Translation: Sitecore Client Translation • Security: Sitecore Client Security, Sitecore Account Managing Multisite Tip: Role membership is a user settings – there it their permission in all sites.
- 23. Contact Us LOCATIONS TORONTO 49 Spadina Avenue Suite201 Toronto, ON M5V 2J1 +1 416 203 2997 NYC 445 BroadHollowRd. Suite25 Melville,NY 11747 +1 631 870 0317 SÃO PAULO Rua Fidalga, 593/603 Suite 16 São Paulo, SP Brazil 05432-070 +55 11 3825 3843 FLORIANÓPOLIS RuaIguaçu, 73 Florianópolis,SC Brazil 88045-610 +55 48 4062 1301 +55 41 4063 9149 OTTAWA 987AWellingtonSt. Suite 201 Ottawa,ON K1Y 2Y1 +1 613 241 2067 +1 877 654 0328
Editor's Notes
- #4: If there are fewer items – center the agenda vertically