DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.

"All users" is not the best Term for security?

 11 Replies
 6 Subscribed to this topic
 17 Subscribed to this forum
Sort:
Page 1 of 212 > >>
Author
Messages
Growing Member
Posts: 63
Growing Member

    One of the most common DNN support questions we get from our clients often ends up being caused by a page having unintentional view or edit rights for all users.
    The meaning of setting rights for “All User” is one of the important things we explain to new Content editors.
    Today I noticed the same View rights issue at a client, and I suddenly realized this is probably due to the term “All User” being confusing.. (not sure why I never thought of that before TBH)
    Not to “us” obviously, but to the occasional Editor / Admin.

    Let’s do a little thought experiment.
    Forget about everything you know about hos DNN works for a minute.
    You are managing an Intranet with a lot of roles and users.
    You just added some users and now you are going to set the view rights for a page.
    As these are a lot of roles, the “Registered Users” entry is all the way at the bottom so you do not see that.
    TBH I think it’s not weird that this admin would interpret “All Users” as all the users in the system as they just added users..
    I think that the term “All Users” kind of needs “Registered User” to be clear.
    So, to avoid this confusion, it might be better to change the term “All Users” to a term that is clear(er) on its own?

    Suggestions:
    -    “Everyone” which has the disadvantage that it references users in Windows
    -    “All Visitors” > which is probably the better term as it clearly states what it is.

    Other suggestions / opinions?

    Advanced Member
    Posts: 241
    Advanced Member
      I kinda like "Everyone" as it implies visitors or users or admins... Well everyone
      Senior Member
      Posts: 1464
      Senior Member

        Personally, I've never preferred to use the term "users" at all.  It's an archaic term (like "screen") that no longer makes sense to me, and for some, it has other negative connotations.  The term "visitor(s)" makes the most since to me for a lot of reasons.  So, I really like the term "All Visitors" as a potential alternative.  It uses today's context and behavior far better and feels less technical.  🤔

        Thank you for bringing this up, Timo!  

        Veteran Member
        Posts: 348
        Veteran Member
          I love that you brought this subject up. I like "Everyone" the best probably. It is shorter and relevant. I've always disliked "All Users" too, but unauthenticated site visitors aren't really "users" (from a DNN membership perspective anyway).

          David Poindexter


          Creator:


          Growing Member
          Posts: 93
          Growing Member

            I prefer Everyone. It's simple and means what it says. With "all users", "user" connotes that perhaps the user is registered, so unregistered users might or might not be considered part of "all users"--too open to interpretation. It also doesn't have anything to do with authentication--that is a different level of categorization.

            Veteran Member
            Posts: 546
            Veteran Member
              Everyone is fine for me as well - you may simply overwrite the Name using language editor - look for it in GlobalRessources > GlobalRessources
              Veteran Member
              Posts: 764
              Veteran Member
                Brings back memories: I had the same question in 2008 but forgot about it. To me 'users' meant everyone with a login.
                So, yeah 'Everyone' is fine.
                Veteran Member
                Posts: 546
                Veteran Member
                  Posted By Will Strohl on 7/3/2024 7:41 PM

                  Personally, I've never preferred to use the term "users" at all.  It's an archaic term (like "screen") that no longer makes sense to me, and for some, it has other negative connotations.  The term "visitor(s)" makes the most since to me for a lot of reasons.  So, I really like the term "All Visitors" as a potential alternative.  It uses today's context and behavior far better and feels less technical.  🤔

                  Thank you for bringing this up, Timo!  

                  I fear, some people would interprete "visitors" as unauthenticated users only.

                   

                   

                  Growing Member
                  Posts: 63
                  Growing Member


                    OK, thank you all for your feedback :-)

                    https://github.com/dnnsof...Platform/issues/6091

                    Veteran Member
                    Posts: 1179
                    Veteran Member
                      To give my two cents: "All visititors", "Unauthenticated visitors" and "Authenticated users" would make sense for me. Or "guests" instead of "visitors"...

                      Happy DNNing!
                      Michael

                      Michael Tobisch
                      DNN★MVP

                      DNN Connect
                      Page 1 of 212 > >>

                      These Forums are dedicated to the discussion of DNN Platform.

                      For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

                      1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy
                      2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
                      3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
                      4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
                      5. No Flaming or Trolling.
                      6. No Profanity, Racism, or Prejudice.
                      7. Site Moderators have the final word on approving / removing a thread or post or comment.
                      8. English language posting only, please.

                      Would you like to help us?

                      Awesome! Simply post in the forums using the link below and we'll get you started.

                      Get Involved