Limit access to media libraries

Mike Bilz asked on April 27, 2017 01:05

Hello Kentico Team,

My site has multiple Media Libraries, each assigned to a different Department with its own Role. I would like to limit these libraries so that only people with that Role can upload to, and edit the contents of, that library.

I have set the "Authorized Roles" in the Security tab of each library, but users are still able to access and upload to other libraries through the "Insert Media" dialogue.

Paradoxically, if users try to access their files through the Media Libraries App, they are denied access even to the libraries they should have rights to.

Is there a permission I am overlooking somewhere?

Thanks in advance.

-Mike

Recent Answers

Brenden Kehren answered on April 27, 2017 07:18

So it sounds like you've only setup grant permissions on the media library, you also need to setup deny permissions too so you deny roles/unauthenticated people.

0 votesVote for this answer Mark as a Correct answer

Mike Bilz answered on April 27, 2017 18:25

Hi Brenden,

Where would I set this up? The security settings inside of the media libraries only allow you to grant permissions, not to deny them.

Is there a permission or a setting that I need to configure globally to get this to work?

Thanks.

-Mike

0 votesVote for this answer Mark as a Correct answer

Brenden Kehren answered on April 27, 2017 19:00

In your media library security. Set all 7 items (Create file, create folder, delete file, delete folder, modify file, modify folder, see library content) to Authorized roles and set the role permissions below. By setting them all to Authorized roles, you are essentially denying access to anyone who is not part of a specified role.

0 votesVote for this answer Mark as a Correct answer

Mike Bilz answered on April 27, 2017 19:12

Hi Brenden,

Those are the settings I have now, but users are still able to access other departments Media Libraries through the "Insert Media" dialog box.

And even with these settings in place users are not able to access their department's Media Library through the Media Libraries App.

I'm sure I flipped a switch somewhere in the permissions that is causing this confusion, but I have no idea what it is.

0 votesVote for this answer Mark as a Correct answer

Brenden Kehren answered on April 27, 2017 19:14

I'm not sure how you have your selectors setup for the Insert media dialog but those are set on the page type level unless you're using them somewhere else. You can set the starting levels based on a few parameters in the page type definitions.

0 votesVote for this answer Mark as a Correct answer

Mike Bilz answered on April 28, 2017 19:38

I'm sorry, I'm still not getting it.

Right now, in order for editors to be able to access the Media Libraries App at all, they need to be give access to Media libraries, Edit media library, and Files within "UI Personalization".

However, these settings override the security settings of the individual Media Libraries, so any user can access any library regardless of which department they are in. Even if the security access is set to Nobody!

How do I give a role access to only one Media Library?

0 votesVote for this answer Mark as a Correct answer

Jared Gotte answered on September 23, 2017 00:33 (last edited on September 23, 2017 00:43)

I had a similar issue. Disabling the "Manage" permission while leaving "Read" enabled via the Role's Permissions -> Media libraries (Module) resolved it. To clarify, the Manage permission was overriding any change I made to the Media Library -> Security tab settings for the role I was testing.

0 votesVote for this answer Mark as a Correct answer