DNNModuleAuthorize access set to edit by default on template

mtrutledge / generator-dnn

Yeoman generator to scaffold DNN / DotNetNuke Modules and Themes.

MIT License

17 stars 10 forks source link

DNNModuleAuthorize access set to edit by default on template #55

Closed sholman closed 5 years ago

sholman commented 5 years ago

Describe the bug

When creating a new module, the template uses the attribute [DnnModuleAuthorize(AccessLevel = SecurityAccessLevel.Edit)] on the HomeController. This requires that a user needs edit permissions to the module to be able to view the module

Expected behavior

I would suggest this be set to [DnnModuleAuthorize(AccessLevel = SecurityAccessLevel.View)] or removed altogether (assuming the default Authorize level is View)

mtrutledge commented 5 years ago

This is fixed in the development branch and will be released with 1.0.8