[JS1-429] How to entirely block access to the customizer

• Type: Bug
• Status: Reopened
• Resolution: Unresolved
• Affects Version/s: 1.4
• Component/s: Customizer
• Environment: Operating System: Other; Platform: Other
• Bugzilla Id: 25538
• Assignee: Unassigned
• Reporter: Paul M
• Created: 16/Dec/03 00:05
• Updated: 26/Jun/21 20:28

Description

Hi,
sorry that this isn't totally a bug, but...

I would like to know how to block access to the customiser; I can remove the
"Customize: HTML WML" from the web page, but if I know the URL to customise the
user's portal, I can simply enter it directly...
e.g. http://localhost/jetspeed/portal/media-type/html/user/anon/page/default.
psml?action=controls.Customize&reset=on

This means that I can change the look and feel for the anonymous user.

I can't find out where in the documentation it says how to block this.. I have
modified all sorts of things in the conf/admin.xreg file, even trying to break
the customiser altogether to see how it works.

I'm probably being dumb, but am desperate for help. And maybe an addition to the
FAQ for other equal idiots would be possible!

thanks for looking kindly on idiot user.
Paul