Posted By progmr on 5/29/2024 7:41 AM

Hi,

in a page I write a razor host script (Settings > Extension > Razor Host): it works great...but only Super User can edit the script. Why?

I try to define custom authorization to editing the module without success: can anyone point me in the right direction?

Thanks,

progmr

The ability to introduce source code that can run server-side operations is an incredibly high risk thing to allow.  For this reason, traditionally only a superuser account can do such operations. 

 

In short, RazorHost implementations are only editable by a super user. That said, we don't recommend using RazorHost. You can do much more in the context of a custom module or a structured content solution that uses Razor (e.g., 2sxc).

There are other options for module you can use.

https://2sxc.org/en/
https://opencontent.readme.io/
https://www.rocket-cds.org/

We use Rocket, but it's less known and documentation is ongoing.

However in response to you question about allowing users to use razor, I suggest you NEVER allow that, just the superuser. As Will pointed out there are very high risk security risks.

Thanks for your suggestions, I'm going to try them

progmr

Posted By progmr on 5/31/2024 1:25 PM

Thanks for your suggestions, I'm going to try them

progmr

If you need some Open Content examples you can find them here: https://github.com/40fing...ntent-Demo-Templates