My client has informed me the Cornerstone’s preview links are publicly accessible. Is there a way to make it only visible to users who are logged into the site?
Hi There,
Thank you for writing in, logout users trying to access the Cornerstone/Builder URL directly is either redirected to login page or 404 page. Depends on whether you enable the Hide Access Path option under X > Cornerstone panel or not.
If this is not the case on your end, please provide us site info on a secure note so we can take a look.
Cheers!
Here is a sample link that my client saw in Google Analytics that appears to be publicly accessible.
https://www.corridorcompany.com/industry/healthcare?cornerstone_preview=1
I’m assuming this link shouldn’t be publicly accessible, correct?
Hi again,
It looks like a published post, make sure the status is set to Draft instead of published.
Hope this helps!
It is a published post. I’m saying that the preview mode link is still accessible to the public. Should this link be accessible or not accessible to the public?
My client saw the link in Google Analytics and wants to know why its accessible to anyone and not just users logged into the site.
Hello There,
Thanks for updating in! The page https://www.corridorcompany.com/industry/healthcare?cornerstone_preview=1 is no longer the Cornerstone preview. If you already have changed the settings as pointed out by @Friech, it should be redirected to a 404 page if the page is in Draft or will be redirected to the actual page if it is already published.
And by the way, I noticed that you have a caching plugin and using a CDN, please clear your site cache first regenerate the cache for Google Analytics.
Hope this helps.