What does the Strict page URL checking option in Security do?

5
I haven't been able to find any documentation that goes deeper than the single line underneath it.   This setting has zero impact on pages without custom URLs (deeplink or otherwise)? If this is disabled, URL accessible pages are completely ignored by Studio Pro for security checks? Why would one choose to have it off in the first place, it seems there are no good reasons to do that?
asked
2 answers
1

Hi, 

 

  • This setting has zero impact on pages without custom URLs (deeplink or otherwise)?

This is correct. It only impacts pages with page URLS. 

  • If this is disabled, URL accessible pages are completely ignored by Studio Pro for security checks?

Yes, this was a improvement added in 9.8. As pages were not used by navigation/pages/microflows they were not checked by studio pro. If you disable this setting, for backwards compatibility, pages are not checked. 

  • Why would one choose to have it off in the first place, it seems there are no good reasons to do that?

As projects used to have this option, this setting was added for backwards compatibility. 

answered
0

Derek, have you received answers on the questions you asked?

I would like to know what the "Strict page URL checking" option in Security does too.

Info from documentation does not help a lot:

Strict Page URL Checking

When Strict page URL checking is enabled, pages that are only accessible through a page URL will also produce consistency errors for security problems. By default, this is enabled in new apps.


Release notes 9.8:

  • We added the option to enable checking security for pages only accessible by page URL. This is enabled by default for new apps and will also become the default in the next major Mendix version. (Ticket 129205)

answered