Change filtering by View permissions

We changed the way the View permissions are applied for a list of items (filter queries by View permissions). This access this option, navigate to Administration » Permissions.

Sitefinity CMS 14.2 and above:

Filter queries by View permissions in no longer considered performance overhead and is on by default for new projects with providers that contain items with broken inheritance. For projects that upgrade to 14.2, the setting is left unchanged during the upgrade procedure.

Sitefinity CMS 5.0 - 14.1:

By default, the queries are not filtered by View permissions. However, there is a configuration setting to enable FilterQueriesByViewPermissions globally for all data providers, or set it per provider overriding the default value:

The global setting is in the Settings -> Advanced -> Security: FilterQueriesByViewPermissions (Enable filtering queries by view permissions)

To override the global setting for a specific provider you have to add filterQueriesByViewPermissions parameter provider settings. 

The upgraded sites will use the previous logic (FilterQueriesByViewPermissions = true).

The newly created sites will be with FilterQueriesByViewPermissions = false.

Sitefinity CMS 4.x:

By default, the queries for secured objects (News, Events, Blogs, BlogPosts, etc.) were always filtered by View permissions when they are displayed in the list view.

This is a performance overhead, since most cases (maybe 99%) the items will have view permissions for everyone.

 

Increase your Sitefinity skills by signing up for our free trainings. Get Sitefinity-certified at Progress Education Community to boost your credentials.

Web Security for Sitefinity Administrators

The free standalone Web Security lesson teaches administrators how to protect your websites and Sitefinity instance from external threats. Learn to configure HTTPS, SSL, allow lists for trusted sites, and cookie security, among others.

Foundations of Sitefinity ASP.NET Core Development

The free on-demand video course teaches developers how to use Sitefinity .NET Core and leverage its decoupled architecture and new way of coding against the platform.

Was this article helpful?