Sitecore restrict access to webpage

Question

I am working on a website that uses Sitecore CMS. An intranet webpart was already created with restricted access.

In this intranet I've created a new page which should only be visible for 1 role. I have created the new role. I tried to mess around with the security of the page in the content editor (Security --> Assign). I published the changes. But no matter what I do, it doesn't seem to have any effect.

Any guidance would be greatly appreciated!

Answer 1

The trick is probably to deny access for the extranet\Anonymous user and then grant access for the role. I like to use the Access Viewer or the Security Editor for that, instead of the Content Editor as it gives you a better overview.

Make sure to put inheritance to good use so you don't have to set security to each item individually but rather on the root of the site (if possible).

I advice you to take a look at the Sitecore Security Administrators Cookbook: http://sdn.sitecore.net/upload/sitecore6/securityadministratorscookbook-usletter.pdf

Answer 2

Open the sitecore desktop ( http://yoururl/sitecore/shell ), click on the 'sitecore' button, then 'security tools' and 'security editor'.

Select the 'anonymous user' account in the ribbon, click on the chosen page in the tree, and click 'x' near 'read'.

Then click 'select' in the ribbon and choose the proper role. Once again select the chosen node and allow 'Read' rights for the role.

Once it's done, you can use 'Access viewer' app (once again sitecore button and security tools on the desktop) to check whether the rights are set properly.