Sitecore KeepLockAfterSave – Configuring Security Policies Per-Role Based

Now here is a nifty Sitecore trick. You have probably learned about the AutomaticLockOnSave feature that allows Sitecore to lock an item when it is saved. The feature is enabled or disabled using configuration setting (and can be negated with the inverse AutomaticUnlockOnSaved setting).

But did you know that you can set the lock on save properties on a per-role?

Yes, Sitecore have a section in the core database where a lot of the security properties are stored. Users who have access the a particular item, have that property.

The policies are stored here: /sitecore/system/Settings/Security/Policies

Sitecore Security Policies

For “KeepLockAfterSave“, you will need to modify the config file, and allow Sitecore to read the CORE database setting:

    The "Keep Lock After Save" item is serialized in order to deploy permission on it, 
    making the roles SSTEditor + SSTAdmin unable to read it, thus making them not keep locks on 
    datasource items after doing page editing 
<include name="KeepLockAfterSave" database="core" path="/sitecore/system/Settings/Security/Policies/Page Editor/Keep Lock After Save"/>

To set the property to false for certain groups, block the access to the item for that group:

My manager group does not have access to this item, meaning that the “Keep Lock After Save” is false.


About briancaos

Developer at Pentia A/S since 2003. Have developed Web Applications using Sitecore Since Sitecore 4.1.
This entry was posted in Sitecore, Sitecore 6, Sitecore 7, Sitecore 8, Sitecore 9 and tagged , , , . Bookmark the permalink.

1 Response to Sitecore KeepLockAfterSave – Configuring Security Policies Per-Role Based

  1. Securityfan says:

    Thank from Moers, Germany


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.