Portal theme RfWebUI - disable top right 'Bookmark' button

[Kevin Papasoglou1709156704]

Hello Citrix community,

 

I have a question about the bookmark possibilities of the new portal theme 'RfWebUI' of NetScaler 11.1. For security reasons we want to disable the 'Bookmark' button which is visible near the top right corner allowing users to add personal web/RDP bookmarks. Unfortunately there seems to be no option at the theme configuration available to disable it so I assume that manual customizations are required here.

Does anyone already know how to disable this function? Unfortunately setting a 'display:none' parameter at the CSS is not sufficient for us as, even if it's unlikely, someone with a little technical knowledge could make the element visible again through the browser's developer tools.

 

Thanks in advance!

 

Best regards,

Kevin

[CarlStalhood]

If you edit the theme, in the Look and Feel > Home Page Attributes section, there's a checkbox for "Show Personal Websites Section".

[Kevin Papasoglou1709156704]

Hi Carl,

 

That's what I tried out initially but unfortunately that option apparently takes no effect. The personal bookmark section as well as the bookmark button stay. I tried unbinding and rebinding the theme as well like it was required by a previous NS version as well. The currently used one is NS11.1 48.10.nc.

 

To me it looks like a bug?

[CarlStalhood]

Try it in build 49. If it still doesn't work, call Support.

[Kevin Papasoglou1709156704]

Build 49 doesn't show any improvement but I guess I found the issue in this. Setting "Show Personal Websites Section" to "No" adds the following code the "theme.css" file located at "/var/netscaler/logon/themes/<theme name>/css":

 

.personal_websites_section {

 display:none; 

}

 

By analyzing the website with the browser's dev tools I couldn't find any object with a name like that. Replacing ".personal_websites_section" with ".personal_bm_dropdown" hides the bookmark button (not pre-configured personal bookmarks though). Even though it doesn't really fulfill my requirements it might be helpful for others.

[Martijn Hoogenbosch1709156786]

So on 11.1.51.21 the bookmark option disappears after disabling the personal websides, but there is a 'go' button instead. I have disabled the enterprise sites as well, but that doesn't seem to help anything.

[Kevin Papasoglou1709156704]

In my opinion Citrix misses a security approach in this case which I find sad. If I want to publish applications to a certain group of users or even third parties or suppliers I don't want them to be potentially able to browse any destination with such function. They shall only be able to access applications that are published to them.

[Martijn Hoogenbosch1709156786]

In my opinion Citrix misses a security approach in this case which I find sad. If I want to publish applications to a certain group of users or even third parties or suppliers I don't want them to be potentially able to browse any destination with such function. They shall only be able to access applications that are published to them.

Agreed, and since CTX is building everything in GUI so upgrades are easy, i don't want to edit custom files and replace CSS functions.

[Mark Brilman]

Is there a update to the GO button (and the ability to add personal bookmarks) ? I'm trying to get rid of it in version 12.0.53.22, but so far am unable to.

[Chad King1709152583]

Bump...  Anyway to disable the GO button that anyone has found?

[Chad King1709152583]

/var/netscaler/logon/themes/{your rfwebui theme}

 

Edit strings.en.json

Add:

"Go":""

 

{
"NetscalerGateway":"NEW TEST! NetScaler Gateway",
"nsg_loginHeading":"Please log on to Continue:",
"nsg_username":"User name :",
"nsg_password1":"Password :",
"nsg_password2":"Password 2 :",
"Details":"",
"About":"",
"Go":""
}
 

[Joel Donaldson1709152440]

Add the following to your theme.css file in the /var/netscaler/logon/themes/{your rfwebui theme}/css folder

 

.theme-highlight-color.personal_bm_dropdown.large._ctxstxt_Go {
 display: none;
}

 

Joel

[Jennifer Sophia Dias]

Edit the theme, in the Look and Feel > Home Page Attributes section, and unchecking the checkbox for "Show Personal Websites Section", the Bookmark option disappears, however the 'go' button will still be present.

In order to remove the 'go' button : 

If you are using RfwebUI default, then add the class under the following path,
/var/netscaler/logon/LogonPoint/custom/style.css
 

.personal_bm_dropdown

{

display: none;

}

If you are using custom RfwebUI theme, then add the class under following path,
cd /var/netscaler/logon/themes/<theme_name>/style.css

.personal_bm_dropdown

{

display: none;

}

[Natanael De Leon]

I was able to figure out how to control enterprise or personal websites using a rewrite rule assigned to the VPN Virtual Server with expression HTTP.REQ.URL.PATH.CONTAINS("bookmark.html") && AAA.USER.IS_MEMBER_OF("DATACENTERS.WW")

 

add rewrite action remove_personal_websites insert_after_all "HTTP.RES.BODY(15000)" "\"visibility: hidden\"" -pattern "\"personal_websites_section\""
add rewrite policy remove_personalwebsites_pol "HTTP.REQ.URL.PATH.CONTAINS(\"bookmark.html\") && AAA.USER.IS_MEMBER_OF(\"ANYGROUP\")\n" remove_personal_websites
 

The expression can be assigned when using group extraction or you can define a default authentication group on the LDAP Authentication Server.

[Nicola Favaretto 2]

On 1/7/2020 at 1:01 AM, Natanael De Leon said:

I was able to figure out how to control enterprise or personal websites using a rewrite rule assigned to the VPN Virtual Server with expression HTTP.REQ.URL.PATH.CONTAINS("bookmark.html") && AAA.USER.IS_MEMBER_OF("DATACENTERS.WW")

 

add rewrite action remove_personal_websites insert_after_all "HTTP.RES.BODY(15000)" "\"visibility: hidden\"" -pattern "\"personal_websites_section\""
add rewrite policy remove_personalwebsites_pol "HTTP.REQ.URL.PATH.CONTAINS(\"bookmark.html\") && AAA.USER.IS_MEMBER_OF(\"ANYGROUP\")\n" remove_personal_websites
 

The expression can be assigned when using group extraction or you can define a default authentication group on the LDAP Authentication Server.

 

thank you very much, just what I needed! to differentiate 2 gateway services