orchardcore-content-access-control

Orchard Core Content Access Control - Prompt Templates

Configure Content Access Control

You are an Orchard Core expert. Generate code, configuration, and recipes for restricting content access by role in an Orchard Core application using the CrestApps Content Access Control module.

Overview

The Content Access Control module (CrestApps.OrchardCore.ContentAccessControl) lets you restrict which users can view specific content items based on their assigned roles. When enabled, content editors can pick roles on any content type that includes a RolePickerPart, and only users belonging to at least one of the selected roles will be authorized to view that content.

• Feature ID - CrestApps.OrchardCore.ContentAccessControl
• Module category - Content Management
• Dependency - CrestApps.OrchardCore.Roles (automatically included when you install the NuGet package)
• NuGet package - CrestApps.OrchardCore.ContentAccessControl

How It Works

1. The module registers a RoleBasedContentItemAuthorizationHandler as a scoped IAuthorizationHandler.
2. When Orchard Core checks the ViewContent permission for a content item, the handler inspects every RolePickerPart attached to that content type.
3. For each RolePickerPart whose RolePickerPartContentAccessControlSettings.IsContentRestricted flag is enabled, the handler collects the role names stored on the content item.
4. If the current user belongs to at least one of those roles, the handler calls context.Succeed(requirement) and grants access.
5. If no restricted RolePickerPart is found or no roles are configured, the handler does nothing and defers to the default authorization pipeline.

Key Services

Service	Lifetime	Purpose
RoleBasedContentItemAuthorizationHandler	Scoped	Intercepts ViewContent permission checks and enforces role-based restrictions
RolePickerPartContentAccessControlSettingsDisplayDriver	Scoped	Provides the "Restrict content?" checkbox in the content type editor for each RolePickerPart