Site Security Not Overriding Section Security (Doc ID 1530687.1)

Last updated on MARCH 30, 2016

Applies to:

Oracle WebCenter Content - Version 11.1.1.5.0 and later
Information in this document applies to any platform.

Symptoms

A Site Studio site has a security group applied to the entire site. If a user doesn't have access to that Security Group they cannot view the site.

How ever, if the  Site Studio site that has a security group applied to the entire site. (same as first scenario) Then a section or two within the site have a security group applied directly to the section. So there is site level security and section level security. The user in this case has access to the SECTION security group but NOT the SITE security group. In this case if the user has a link directly to the section that has security applied the overall site security group is ignored and the section security group takes
precedence and the user is able to see the page.

Whatever security is set on the section is the only one that is paid attention to. If there is no security on the section then we check the site level security?

So it is possible to not have access to the site, but have access to individual sections/nodes?


We want to know if this is intended or not. The bottom line question is, should section security take precedence to site security if both are applied?

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms