wid-tech / website

1 stars 0 forks source link

App page URLs work despite being 'turned off' in settings #44

Open fhobswid opened 3 years ago

fhobswid commented 3 years ago

We will only use certain Silkstart Apps in certain chapters/the apex site. However, the URLs still work even in chapters where the App has been turned off - this may cause as issue for Google indexing the incorrect pages, and be confusing in the site architecture/if someone accidentally types in a standard link, such as womeninidentity.org/blog.

Examples of URLs: https://womeninidentity.silkstart.com/blog - (not using this app currently) https://womeninidentity.silkstart.com/groups - (only using forums in global chapter)

This is the case as an admin, but also as a logged out user - so is not only visible to admins.

fhobswid commented 3 years ago

Possibly related to this, it seems odd that anyone would be able to access this page - https://womeninidentity.silkstart.com/sponsors This URL is much more suited to what is listed at https://womeninidentity.silkstart.com/sponsors_page If I add an alias to /sponsors_page (/sponsors) will that work? What then happens to the actual /sponsors page?

mcresilkstart commented 3 years ago

@fhobswid this behavior for app pages like blogs and groups has been logged previously as an issue that we plan to address with a change so that they won't be accessible in this way. I have just added a report of the same behavior for /sponsors (normally only an admin accesses this page to edit/add sponsor details) and for /sponsors_page. You also get the same thing for /team. At least the access is read-only for these pages.

I have asked for a timescale for the above fix - but it won't be before the planned launch date but it is 'on deck' for being fixed soon.

You need to maintain admin access to the /sponsors page as that is where sponsor details are maintained.

EndlessTrax commented 1 year ago

Email update form @mcresilkstart : "not yet fixed. I see the issue (SS-7066) is tagged as on-deck and have just asked for it to be scheduled and asked for an estimated date for completion."