Skip to main content

Experience Management

Custom Security Domains & Language Security Error

I recently ran into a language security error with a custom Sitecore security domain and have detailed the fix in this post. I have also provided links to a couple of other helpful resources for setting up new custom security domains.
Sitecore custom security domain documentation can be found here and covers most of the steps needed to create a new domain.
Create new domain
The creation of a new domain triggers an update in the \App_Config\Security\Domains.config which will need to be propagated to all environments. Since this lives outside of the Sitecore node, you cannot patch new domains in with a Sitecore config override file but Kam Figy details a patch solution here.
This is all well and good, but now when you log in with a non-admin user, this language security error appears:
“The security settings for the current language prevent you from seeing this item. To continue, select another language from the Language drop-down list on the Versions tab.”
Language security error
Every domain in Sitecore has a build in “Everyone” role. All users in the domain inherit from this role but it cannot be managed like a regular role. It is only accessible from the security editor so access can be assigned but not by the regular roles manager.
As expected, when my new custom domain was created, an “Acme\Everyone” group was automatically created. What was not expected is that this new role does not have language read and write access by default.
To fix this, go to the security editor and search for the everyone account for your domain
Select account
Click on the columns icon and check “Language Read” and “Language Write”
Select columns
Check language read and write
Browse to the System/Languages folder and click Assign Security. You will notice that the sitecore\Everyone group has Language Read and Language Write access on this folder and descendants. Give your domain Everyone user the same access.  Problem solved!
Assign security
Of note: this post refers to Sitecore 9 update 1.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Wendy Derstine

More from this Author

Follow Us