Permissions configuration

The security configuration information is stored in the SecurityConfig class.

The configuration information for the permission sets is persisted in the Permissions property of the SecurityConfig class. The code below gets the configuration information for a permission set. The Telerik.Sitefinity.Security.SecurityConstants.Sets class contains the names of all permission sets.

In the following example, first, you initialize the SecurityConfig class. The Permissions property is a dictionary that accepts the permission set name as key. To get the blogs permission set, you use BlogsPermissions.Sets.Blog.SetNameas key.

The permission sets that the Permissions property stores contain all configuration information about the actions that can be granted or denied for the given set of objects. In the following example, blogsPermissions contains all actions that can be performed on blogs. You use the actions when creating permission associated with a permission set and granting and denying it for the principal. For more information, see For developers: Grant and deny permissions.

The following example initializes the view action for the blogs:

using Telerik.Sitefinity.Configuration;
using Telerik.Sitefinity.Modules.Blogs;
using Telerik.Sitefinity.Security.Configuration;

namespace SitefinityWebApp
{
    public class PermissionsConfiguration
    {
        public void PermissionsConfig()
        {
            SecurityConfig secConfig = Config.Get<SecurityConfig>();
            Telerik.Sitefinity.Security.Configuration.Permission blogsPermSet = secConfig.Permissions[BlogsPermissions.Sets.Blog.SetName];

            int actionsMask = blogsPermSet.Actions[BlogsPermissions.Sets.Blog.View].Value;

        }
    }
}

The Actions property of the Permission class is a dictionary that accepts the action name as key. To get the view action for the blog, you use BlogsPermissions.Sets.Blog.SetName ``as key.

An action in Sitefinity CMS is characterized with a set of properties.

• NameThe name of the action.
• TitleThe title of the action.
• DescriptionThe description of the action.
• ValueThe value of the action. The actions in the permission set have specific order (starting from 0) that defines their value using the equation action value = 2ordinal. When creating permission, you use the Value property to create the proper bit mask to grant or deny the action. For more information, see For developers: Permissions API and For developers: Grant and deny permissions.