Tweaking Community Server Out of the Box
There's a couple of extra steps I take to tweak Community Server out of the box.
Tweak 1
Go to Control Panel > Administration > Membership > Manage Roles (Manage All Roles in CS 2.1). Add a new role named ResourceOwner and assign it to any user that is the owner of a resource like a blog. By default, Community Server won't show the Control Panel link to any user that's not a moderator or administrator. I use this role to give access to the Control Panel link to users like blog owners. Next, in the navigation section of SiteUrls.config, modify the controlpanel link to include the ResourceOwner role in roles.
<
link
name
=
"
controlpanel
"
resourceUrl
=
"
controlpanel
"
resourceName
=
"
controlpanel
"
roles
=
"
SystemAdministrator,BlogAdministrator,ForumsAdministrator,Moderator,GalleryAdministrator,FileAdministrator,ReaderAdministrator,MembershipAdministrator,ResourceOwner
"
/>
Tweak 2
By default, the Web.config file in /ControlPanel allows any authenticated user access to the Control Panel. Change Web.config in /ControlPanel to the following:
<
configuration
>
<
system.web
>
<
authorization
>
<
allow
roles
=
"
SystemAdministrator,BlogAdministrator,ForumsAdministrator,Moderator,GalleryAdministrator,FileAdministrator,ReaderAdministrator,MembershipAdministrator,ResourceOwner
"
/>
<
deny
users
=
"
*
"
/>
authorization
>
system.web
>
configuration
>
Tweak 3
In Community Server 2.1 Beta 1, Beta 2 and RC1, there is no Web.config file in the /ControlPanel/Reporting folder, so any authenticated user can access Reporting. Add a Web.config file to the /ControlPanel/Reporting folder with the following:
<
configuration
>
<
system.web
>
<
authorization
>
<
allow
roles
=
"
SystemAdministrator,BlogAdministrator,ForumsAdministrator,GalleryAdministrator,ReaderAdministrator,MembershipAdministrator,FileAdministrator
"
/>
<
deny
users
=
"
*
"
/>
authorization
>
system.web
>
configuration
>