UNIVERSITY*OF*CALGARY InformationTechnologies PRIVATEPAGES DRUPAL7WEBCONTENTMANAGEMENT September2015
TableofContents FirstSteps...1 AddingaPrivatePage...2 AccessControl...4
PrivatePages Drupal7WebContentManagement PrivatePagesareusedratherthanBasicpageswhensomeorallofasite scontent(includingfileattachments)needsto beprivatelydisplayed inotherwords,contentthatisnotmadeavailabletothegeneralpublic.inorderforprivate contenttobedisplayed,avisitortoasitemustlogin(i.e.authenticate).privatepagesarenotindexed(i.e.are unsearchable)bysearchengineslikegoogle. FirstSteps Ifyoudecidethatsomeorallofyoursite scontentshouldnotbeaccessibletoanonymoususers(i.e.visitorstoyoursite whoarenotrequiredtoauthenticate,orlogin),thenyouwillneedtocontactwcmsupportatwww.ucalgary.ca/it/help torequesttheprivatepagesfeature. Inadditiontoenablingthisfeature,WCMSupportwillworkwithyoutoconfigurewhowillbeabletoaccesstheprivate content(i.e.whichrolesonyoursitewillbegrantedpermissiontoaccessthiscontent).thisiscalledaccesscontrol. ThedefaultpermissionsforPrivatePagesarethatanyauthenticateduserwillhaveview[onlyaccess this meansanyoneloggedinwithauniversityofcalgaryitaccount(i.e.itusernameandpassword). Youcan,however,bemuchmorespecificaboutwhowouldbeabletoaccesstheprivatecontent: WiththehelpofWCMSupport,accesscanbegrantedtoaspecificsetofauthenticatedusers.Forexample,only graduatestudentswithinthefacultyofscience, Or,WCMSupportcangiveyoutheabilitytoselectwhogetsaccessbyshowingyouhowtomanuallyaddspecific usersandgrantingthemthememberrole. Also,AccessControlmayalsobeappliedtoothercontenttypes(e.g.CollapsingFieldPages,PanelPages,Webforms)in thesamefashionasaprivatepage.wcmsupportwillworkwithyoutodeterminewhichcontenttypestoinclude. ContactWCMSupportatwww.ucalgary.ca/it/helptodiscusshowtobestsetupPrivatePagesandAccessControlfor yoursite. OnthefollowingpagesyouwillfindinstructionsonhowtocreateaPrivatePageandinformationonAccessControl settings. 1 P age September2015
AddingaPrivatePage 1. HoveroverContent*intheAdministration*menu.MovedowntoAdd*content*andthenclickthePrivate*Page* optionthatappears. Note:IfyoudonotseePrivate*Page*listedunderAdd*content,contacttheWCMSupportteamtorequestthePrivate Pagefeaturebeactivatedonyoursite(andcustomized,ifrequired).Todoso,gotowww.ucalgary.ca/it/help. Note:TheremainderofthissectionassumesyouarefamiliarwithhowtocreateBasicPages.TolearnmoreaboutBasic Pages,visitwww.ucalgary.ca/it/help.UndertheTrainingheading,clicktheWeb*Content*ManagementlinktofindUser* Guides(BasicPageswillbecoveredunderDrupal*7*Web*Content*Management*Basics)aswellaslinkstoregisterfor Instructor<Led*Training(BasicPagesarecoveredintheIntroduction*to*Drupal*Web*Content*Managementclass). 2. ThestepsinvolvedincreatingaPrivatePagearealmostidenticaltothestepsforcreatingaBasicPage. YouwillneedtoenteraTitle(whichwillappearatthetopofthepage)andthecontentofthepageisenteredin thebody*field. * * 2 P age September2015
3. File*AttachmentsmaybeaddedinthesamefashionasonewoulddoonaBasicPage.Filesareconsidered PrivateFileswhentheyareattachedtoaPrivatePagewhichhashaditsaccessrestrictedtoauthenticatedusers ofanykind.therefore,searchengineslikegooglewillnotindexthesefiles(makingthemunsearchable)and userswillneedtoauthenticateinordertoviewsuchfiles(assumingtheyhavenotalreadyauthenticatedtosee thepagethefilesarelinkedto). Note:IfyouchoosetoallowaPrivatePage*tobeviewedbyanonymoususers(anyonewhoisnotloggedintothesite), anyfilesyouhaveattachedandhyperlinkedtothatpagewillbeaccessibletoanyoneclickingthoselinks.toensure thosefilesremainonlyvisibletoauthenticatedusers,donotgiveaccesstoanonymoususerstothepagetheyare attachedto.moreinformationaboutgrantingaccesstousersisfoundintheaccess*controlsectionbelow.ifyouare unsurewhattodo,contactwcmsupport(www.ucalgary.ca/it/help). 4. WhenconfiguringtheMenu*settings,notethefollowingdifferencesfromtheMenusettingsofaBasicPage: IfyouchoosetoProvide*a*menu*linkforaPrivatePage,thismenulinkwillonlybevisibletouserswhocan accessthistypeofcontent(i.e.authenticateduserswhologinwiththeiritaccountandwhofitanyadditional criteriadefinedwhenprivatepageswereconfiguredforyoursite).therefore,themenulinkswillonlyappearto theseusersoncetheyareloggedin. IfyouwanttheoptiontohavePrivatePagemenulinksappearregardlessofwhethertheuserisloggedintoyour siteornot,askwcmsupport(www.ucalgary.ca/it/help)toenablethepersistent*menu*itemsmoduleonyour site.thiswilladdthealways*show*this*menu*linkoptiontotheprivatepage smenu*settings.youcanchooseto checkitoffandthemenulinkwillbevisibletoall.ifsomeoneclicksamenulinkthatleadstoarestrictedprivate Pageandtheyarenotloggedin,theywillbepromptedtologinwiththeirITAccountontheCAS(Central AuthenticationService)page. 5. Adjustanyothersettings,ifrequired,thenclickSave. 3 P age September2015
AccessControl Ifyourentiresitewillbelockeddown(i.e.everypageonyoursitewillrequireauthentication),thentheAccessControl settingswillbeconfiguredforyoubywcmsupportandyouwillnotneedtoworryaboutthissection. If,however,yoursitewillhavesomepublicandsomeprivatepages,thenyoumaybegiventheabilitytomodifythe AccessControlsettingsyourselfforindividualpages. Note:IfyouarenotcarefulwithAccessControlsettings,youmayexposeprivatecontenttothepublic.Pleasecontact WCMSupportatwww.ucalgary.ca/it/helpifyouhaveanydoubtaboutAccessControlsettingswhatsoever. Assumingthecontenttypeinquestion(e.g.PrivatePages)hasbeensetupwithAccessControlandyouhavebeengiven theabilitytomodifythesesettingsyourself,thefollowingstepswilloutlinehowtospecifywhocanaccessagivenpage. 1. GototheAccess*control*tab. 2. YouwillseetheRole*based*access*control*settings*list(seeimageonnextpage).Anysettingsyoumayneedto modifywillbeunderthefirstheading:view*any*private_page*content. Bydefault,PrivatePagesaresetuptoallowview[onlyaccesstoauthenticated*users,aswellasSite*Admins. Therefore,aPrivatePageislockeddownbydefault anonymoususersdonothavetheabilitytoseethese pages,nordosearchengines.ifyouwillbegrantingaccesstospecificindividualswhoyouwillbeassigningthe Memberroleto,youmayneedtocheckoffthatroleonthispage(althoughWCMSupportmayhavealready configuredaccesscontrolwiththememberrolecheckedoffbydefaultforyouinthatcase). Note:PrivatePagesshouldneverhavetheanonymousrolecheckedoff.Ifyoudo,youwillexposeprivatecontenttothe public.basicpagesshouldbeusedinsteadforpublicviewing.onceagain,contactwcmsupportat www.ucalgary.ca/it/helpifyouhaveanydoubtaboutaccesscontrolsettingswhatsoever. IfyouhaveAccessControlsetupforothercontenttypes(e.g.CollapsingFieldPages,Panels,Webforms,etc.), thenyoumaychoosetoaddanonymoususersornot(sinceyoumayhavesomewebformsforpublicuseand someforprivateuse,forinstance). 4 P age September2015
3. Onceyouhaveconfiguredthesettingsasrequired,clicktheSubmitbuttontocommitthechanges. 5 P age September2015