Forum Discussion
ChhamaJ
10 years agoKhoros Alumni (Retired)
Hi There,
The rest call in the custom components is run using the current user's context. Can I know the use case so that I can advise you better?
Regards,
Chhama
The rest call in the custom components is run using the current user's context. Can I know the use case so that I can advise you better?
Regards,
Chhama
sullysnack
10 years agoKhoros Alumni (Retired)
Yes, consider a custom social sharing widget which appears on all forum topic pages. The widget will show on topic pages of active admin-only boards. When an administrator shares the topic page url to Facebook, Facebook's OG info parser cannot access the url. When an administrator shares the topic page url to Twitter, any recipient of the tweet can click on the url but will see either a Lithium error page or the Lithium log in page. If a regular user logs in, they'll see a permission denied error. We want to prevent any user with elevated permissions from ever sharing a protected post publicly.