November Happy Hour will be moved to Thursday December 5th.

Episerver Log-Out

Vote:
 

Hi all,

I have created a page on episerver, and have given read access to just one account. This works as expected, in that when visiting the page, a login-prompt is seen, and when the credentials are entered, this account can view the page.

The problem is - once the user has authenticated once, there is no 'logout' option. This could result in the authenticated user viewing content, navigating away, but, then leaving the door open for an unauthorised user to view it - EG, if it had been accessed on a shared / public computer.

Does anyone have any ideas how to overcome this or how to force a log-out?

Many thanks!

James

 

 

#47287
Jan 21, 2011 16:28
Vote:
 

I assume based on your description that you are relying on the default EPiServer login (which is used to log in to online center / edit mode / whatever). So you have no login option on the site's templates?

The "default" logout option sits in online center, so users without access to that have to be given a logout option in the templates of the site. So if you don't already have it you'll have to implement it in your templates and place it somewhere the users can find it. You could for example display a logout link in the header of the site for logged-in users (and display nothing for anonymous users, unless you want to build a custom login as well). If you're lucky you can accomplish what you want just using the asp LoginStatus control.

#47296
Jan 22, 2011 15:31
Vote:
 

You could add in the master page, forced logged out in PreRender, then you would need to login for each page request

#47306
Jan 23, 2011 21:40
This thread is locked and should be used for reference only. Please use the Episerver CMS 7 and earlier versions forum to open new discussions.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.