UnauthorizedAccessException on LifecycleDecorator.CheckOut

When calling the CheckOut method of the LifecycleDecorator as an anonymous user and using the approaches for suppressing the security checks, an UnauthorizedAccessException is thrown in some cases.

Oct 9, 2018
Knowledge

Title

URL Name

UnauthorizedAccessException-on-LifecycleDecorator-CheckOut

Article Number

000111441

Environment

Product: Sitefinity Version: 10.2, 11.0, 11.1 OS: All supported OS versions Database: All supported Microsoft SQL Server versions

Question/Problem Description

When calling the CheckOut method of the LifecycleDecorator as an anonymous user and using the approaches for suppressing the security checks, an UnauthorizedAccessException is thrown in some cases:

Throwing exception:
Case with manager.Provider.SuppressSecurityChecks = true
Code sample:

var newsManager = NewsManager.GetManager();
newsManager.Provider.SuppressSecurityChecks = true;
var newsItem = newsManager.GetNewsItems().FirstOrDefault(i => i.Status == ContentLifecycleStatus.Master);
var temp = newsManager.Lifecycle.CheckOut(newsItem) as NewsItem;
newsManager.Provider.SuppressSecurityChecks = false;

Case with using (new ElevatedModeRegion(manager))
Code sample:

Code sample:
var newsManager = NewsManager.GetManager();
using (new ElevatedModeRegion(newsManager))
{
    var newsItem = newsManager.GetNewsItems().FirstOrDefault(i => i.Status == ContentLifecycleStatus.Master);
    var temp = newsManager.Lifecycle.CheckOut(newsItem) as NewsItem;
}

Not throwing exception:

Case with SystemManager.RunWithElevatedPrivilege(d => { ... })
Code sample:

SystemManager.RunWithElevatedPrivilege(d => {
    var newsManager = NewsManager.GetManager();
    var newsItem = newsManager.GetNewsItems().FirstOrDefault(i => i.Status == ContentLifecycleStatus.Master);
    var temp = newsManager.Lifecycle.CheckOut(newsItem) as NewsItem;
});

Steps to Reproduce

Clarifying Information

Error Message

Defect Number

Bug 257732

Enhancement Number

Cause

For more information about Bug 257732, see https://feedback.telerik.com/Project/153/Feedback/Details/257732

Resolution

Fixed in:
Sitefinity 11.2.6900.0

Workaround

Use SystemManager.RunWithElevatedPrivilege(d => { ... }); as this is the only approach that is working when the security checks have to be suppressed.
Code sample:

SystemManager.RunWithElevatedPrivilege(d => {
    var newsManager = NewsManager.GetManager();
    var newsItem = newsManager.GetNewsItems().FirstOrDefault(i => i.Status == ContentLifecycleStatus.Master);
    var temp = newsManager.Lifecycle.CheckOut(newsItem) as NewsItem;
});

Notes

Keyword Phrase

Last Modified Date

5/7/2019 1:18 PM

UnauthorizedAccessException on LifecycleDecorator.CheckOut

Files(0)

Was this article helpful?

Was this article helpful?

UnauthorizedAccessException on LifecycleDecorator.CheckOut

Information

Related Articles