How to configure ELMAH to show log just for Sitecore user

Question

I added Elmah tool to my Sitecore Solution, actually I did it like here http://newguid.net/sitecore/2011/using-elmah-for-error-logging-within-sitecore/ Just one rolls I have enabled is allowRemoteAccess property,

<elmah>
<security allowRemoteAccess="1" />  
</elmah>

Now logs available for every one from any place, but I want to show it just for user who is login (authorized) to sitecore (sitecore users)

How I can mange it ?

Thanks.

score 1 · Answer 1 · edited May 23 '17 at 12:29

1

Not sure what Elmah had built in now, but I used to do this:

<location path="elmah.axd">
    <system.web>
        <authorization>
            <allow roles="SITECORE_USERS"/> <!---put your role here-->
            <deny users="*"/> 
        </authorization>
    </system.web>
</location>

Securing Elmah RSS Feeds in ASP.NET website

edited May 23 '17 at 12:29

Community

1
1

answered Jan 10 '13 at 14:52

rick schott

21,012
5
52
81

Hi thank, but it doesn't work on my side. could you please tell me maybe I need setup some other setting for sitecore ? – Arbejdsglæde Jan 10 '13 at 15:09
Note sure what the user roles site core uses, I just made one up for example. – rick schott Jan 10 '13 at 15:12
I see but i have tried to use roles from aspnet_Roles table and is dos't work. – Arbejdsglæde Jan 10 '13 at 15:30
I found out other more intesting and flex solution custom IHttpModule + IRequestAuthorizationHandler – Arbejdsglæde Jan 13 '13 at 13:44

score 1 · Accepted Answer · answered Jan 13 '13 at 13:42

I found solution after research of elmah source code and this article http://dotnetslackers.com/articles/aspnet/Securing-ELMAH-with-Independent-HTTP-Authentication.aspx. User can implement IRequestAuthorizationHandler for custom IHttpModule I did next:

 public class SitecoreAuthModule :IHttpModule, IRequestAuthorizationHandler
{
    public bool Authorize(HttpContext context)
    {
        return SC.Context.User.IsAdministrator;
    }

    public void Init(HttpApplication context)
    {
        context.AuthenticateRequest += new EventHandler(ContextAuthenticateRequest); ;
    }

    void ContextAuthenticateRequest(object sender, EventArgs e)
    {
        var context = sender as HttpApplication;
        if (context.Request.Path.IndexOf("elmah.axd",
            StringComparison.InvariantCultureIgnoreCase) < 0)
            return;
    }

    public void Dispose()
    {

    }
}

How to configure ELMAH to show log just for Sitecore user

2 Answers2