4

Resolved

Set as Homepage can take down your site

description

The current implementation can allow a user to reset the permalink for home page without knowing they have done so, and unchecking the checkbox associated with HP and a specific content item - therefore, the homepage for the site will fail -giving the user the impression that the entire site is down.

Repro:
Admin Role has permission to set HP
User Role does not have that permission

User goes to the content item HP to make an update.
User Saves the changes using the Save function
Permalink gets updated to /home
If user saves again it updates to home-2, etc.
The Set as HP checkbox becomes unchecked after the first save example and since the User Role which does not have permission to reset HP, they are unaware that then HP has been unchecked/reset

Then the HP fails...

SOLUTION
Refactor the above manner in which HP is set for an Orchard site

a) By default, the Site Owner and Admin Role ONLY should have access to being able to set (or reset) the HP for the site
b) This setting should ONLY be accessible from the Settings section in the Admin Menu
c) There should be a dedicated page for setting HP on which there is a Content picker that allows the Supra Admin to pick the HP
d) It should have the ability to publish later
e) Audit trail view (who made the change and when)

comments

sebastienros wrote Apr 9, 2013 at 8:55 PM

Fix the bug: the home page should not be lost if the editor is not displayed.
Later: find a better solution for handling homepage.

ylan wrote Apr 18, 2013 at 11:20 AM

Our HP went down again tonight after the user saved a Slide Show which was set as HP. The system thought when we saved the Slide Show that it was conflicting with an already existing HP URL.

After cache TTL expired the issue surfaced that HP was down and site was down. We were unable to reset the HP by clicking on the Set as Homepage. It would throw an error every time we would try and save that Slideshow (HP) as the home page.

ylan wrote Apr 18, 2013 at 11:38 AM

Note our issues were very similar to the following: http://orchard.codeplex.com/discussions/276726

sebastienros wrote Apr 18, 2013 at 10:54 PM

Fixed in changeset 3083bf414c1d

sfmskywalker wrote Mar 28 at 1:28 AM

Fixed in changeset 6dd3989c407a0fa1f78da20edcc16126b9af00f2