1
Vote

Regulars users can now access Site Settings menu

description

First off love the solution, been using it for a while.
 
This was brought to my attention by a user (David Lozzi), as he was able to navigate to /_layouts/settings.aspx (Site Settings) as a regular user and see your custom action available.
 
Although he couldn't save anything, some of the Admins found this disturbing and didn't want users on that menu at all.
 
In the Actions -> Elements.xml
We added: Rights="FullMask" to the <CustomAction> node and this block regular users from getting back to the Site Settings page.

comments