Orchardcore: Implement content item permissions

[pbros]

Hello,

Is it possible to restrict content visibility to certain user groups? For example, some content is only visibility to anonymous users, other is for logged in, and some more is for a subset of logged in users (e.g. VIP Clients)

Thank you

[Skrypt]

You can use User Roles for that matter. But you need also to implement your controllers properly for making those permissions effective afterward.

[pbros]

Thank you! From what I can tell, I could manage access to different content types this way.

What I had in mind was more to restrict specific content to user groups. For example, I would have a blog post that is visible to all, another one that is visible to all authenticated users, and another one that is only visible to logged in VIP users.

Thanks again!

[Skrypt]

It's not implemented yet but that's called Content Item Permissions. There is a feature like this in 01 if you want to migrate it.

[sebastienros]

Or a permission by blog (dynamic permissions).
Or a module to select which types shoudl have dynamic permissions per content item. But that would be equivalent to content item permissions.

[cnoelker]

Related to this are page permissions. As far as I see, I can only implement this individually, not by configuring it.
If I restrict a page to a specific role, the navigation menu should be smart enough to hide the link to the page if the user is not authorized to see it. And the search should not include this in the search results if the user is not authorized to see it.
What's the status of this feature?

[Skrypt]

You mean restrictions per URL?

[cnoelker]

Yes, E.g. one role should have the permission to see a page while another role does not have the permission.

[agriffard]

In O1, the Content permissions Part looked like this in the admin:

[agriffard]

You could have a look at this module: https://github.com/EtchUK/Etch.OrchardCore.ContentPermissions