Skip to content

Passing controller and action name to LoadContentFrom overload does not hide items when SecurityTrimming is enabled #3887

@Juveniel

Description

@Juveniel

Bug report

The default Security Trimming of the PanelBar and TabsTrip currently does not hide the top level items, when a HttpUnauthorizedResult is returned from the controller action.

Reproduction of the problem

Checkout the attached project:

TelerikMvcAppPanelBarSecurityTrimming.zip

Notice that the first two PanelBar widgets load data remotely via LoadContentFrom() and DataSource(). Although the controller action methods return HttpUnauthorizedResult(), the items of the PanelBar are being displayed.

The third PanelBar is bound to local data, and the items with unauthorized actions are properly hidden.

Current behavior

Items with unauthorized URL are being displayed.

Expected/desired behavior

If the URL, which the PanelBar/TabStrip item points to, is not authorized, then the item should be hidden.

Environment

  • Kendo UI version: 2019.3.917
  • Browser: [all]

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions