Templating: Prevent editing of templates and partial views in production runtime mode (closes #21564)

src/Umbraco.Cms.Api.Management/Controllers/PartialView/PartialViewControllerBase.cs

@@ -38,6 +38,10 @@ protected IActionResult PartialViewOperationStatusResult(PartialViewOperationSta
                     .WithDetail("The partial view name is invalid.")
                     .Build()),
                 PartialViewOperationStatus.NotFound => PartialViewNotFound(),
+                PartialViewOperationStatus.NotAllowedInProductionMode => BadRequest(problemDetailsBuilder
+                    .WithTitle("Not allowed in production mode")
+                    .WithDetail("Partial view modifications are not allowed when running in production mode.")
+                    .Build()),
                 _ => StatusCode(StatusCodes.Status500InternalServerError, problemDetailsBuilder
                     .WithTitle("Unknown partial view operation status.")
                     .Build()),

src/Umbraco.Cms.Api.Management/Controllers/Template/TemplateControllerBase.cs

@@ -1,4 +1,4 @@
-using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
 using Umbraco.Cms.Api.Common.Builders;
@@ -42,6 +42,14 @@ protected IActionResult TemplateOperationStatusResult(TemplateOperationStatus st
                 .WithTitle("Master template cannot be deleted")
                 .WithDetail("The master templates cannot be deleted. Please ensure the template is not a master template before you delete.")
                 .Build()),
+            TemplateOperationStatus.NotAllowedInProductionMode => BadRequest(problemDetailsBuilder
+                .WithTitle("Not allowed in production mode")
+                .WithDetail("Template modifications are not allowed when running in production mode.")
+                .Build()),
+            TemplateOperationStatus.ContentChangeNotAllowedInProductionMode => BadRequest(problemDetailsBuilder
+                .WithTitle("Content change not allowed in production mode")
+                .WithDetail("Template content changes are not allowed when running in production mode. Metadata updates are permitted.")
+                .Build()),
             _ => StatusCode(StatusCodes.Status500InternalServerError, problemDetailsBuilder
                 .WithTitle("Unknown template operation status.")
                 .Build()),

src/Umbraco.Core/DependencyInjection/UmbracoBuilder.cs

@@ -328,11 +328,11 @@ private void AddCoreServices()
             Services.AddUnique<IContentTypeEditingService, ContentTypeEditingService>();
             Services.AddUnique<IMediaTypeEditingService, MediaTypeEditingService>();
             Services.AddUnique<IFileService, FileService>();
-            Services.AddUnique<ITemplateService, TemplateService>();
+            Services.AddUnique<ITemplateService>(sp => ActivatorUtilities.CreateInstance<TemplateService>(sp));
             Services.AddUnique<IScriptService, ScriptService>();
             Services.AddUnique<IStylesheetService, StylesheetService>();
             Services.AddUnique<IStylesheetFolderService, StylesheetFolderService>();
-            Services.AddUnique<IPartialViewService, PartialViewService>();
+            Services.AddUnique<IPartialViewService>(sp => ActivatorUtilities.CreateInstance<PartialViewService>(sp));
             Services.AddUnique<IScriptFolderService, ScriptFolderService>();
             Services.AddUnique<IPartialViewFolderService, PartialViewFolderService>();
             Services.AddUnique<ITemporaryFileService, TemporaryFileService>();

src/Umbraco.Core/Services/OperationStatus/PartialViewOperationStatus.cs

@@ -43,5 +43,10 @@ public enum PartialViewOperationStatus
     /// <summary>
     /// The specified partial view was not found.
     /// </summary>
-    NotFound
+    NotFound,
+
+    /// <summary>
+    /// The operation is not allowed when running in production mode.
+    /// </summary>
+    NotAllowedInProductionMode
 }

src/Umbraco.Core/Services/OperationStatus/TemplateOperationStatus.cs

@@ -44,4 +44,6 @@ public enum TemplateOperationStatus
     ///     The operation failed because the master template cannot be deleted while it has child templates.
     /// </summary>
     MasterTemplateCannotBeDeleted,
+    NotAllowedInProductionMode,
+    ContentChangeNotAllowedInProductionMode,
 }

src/Umbraco.Core/Services/PartialViewService.cs

@@ -1,5 +1,7 @@
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Umbraco.Cms.Core.Configuration.Models;
 using Umbraco.Cms.Core.DependencyInjection;
 using Umbraco.Cms.Core.Events;
 using Umbraco.Cms.Core.Models;
@@ -23,6 +25,14 @@
 public class PartialViewService : FileServiceOperationBase<IPartialViewRepository, IPartialView, PartialViewOperationStatus>, IPartialViewService
 {
     private readonly PartialViewSnippetCollection _snippetCollection;
+    private readonly IOptions<RuntimeSettings> _runtimeSettings;
+
+    // TODO (V18): Remove obsolete constructors and the ActivatorUtilitiesConstructor attribute.
+    // Also update UmbracoBuilder where this service is registered using:
+    //   Services.AddUnique<IPartialViewService>(sp => ActivatorUtilities.CreateInstance<PartialViewService>(sp));
+    // We do this to allow the ActivatorUtilitiesConstructor to be used (it's otherwise ignored by AddUnique).
+    // Revert it to:
+    //   Services.AddUnique<IPartialViewService, PartialViewService>();
 
     /// <summary>
     ///     Initializes a new instance of the <see cref="PartialViewService" /> class.
@@ -35,6 +45,8 @@
     /// <param name="userIdKeyResolver">The resolver for converting user keys to IDs.</param>
     /// <param name="auditService">The service for audit logging.</param>
     /// <param name="snippetCollection">The collection of available partial view snippets.</param>
+    /// <param name="runtimeSettings">The runtime configuration settings.</param>
+    [ActivatorUtilitiesConstructor]
     public PartialViewService(
         ICoreScopeProvider provider,
         ILoggerFactory loggerFactory,
@@ -43,22 +55,15 @@
         ILogger<StylesheetService> logger,
         IUserIdKeyResolver userIdKeyResolver,
         IAuditService auditService,
-        PartialViewSnippetCollection snippetCollection)
+        PartialViewSnippetCollection snippetCollection,
+        IOptions<RuntimeSettings> runtimeSettings)
         : base(provider, loggerFactory, eventMessagesFactory, repository, logger, userIdKeyResolver, auditService)
-        => _snippetCollection = snippetCollection;
+    {
+        _snippetCollection = snippetCollection;
+        _runtimeSettings = runtimeSettings;
+    }
 
-    /// <summary>
-    ///     Initializes a new instance of the <see cref="PartialViewService" /> class.
-    /// </summary>
-    /// <param name="provider">The core scope provider for managing database transactions.</param>
-    /// <param name="loggerFactory">The factory for creating loggers.</param>
-    /// <param name="eventMessagesFactory">The factory for creating event messages.</param>
-    /// <param name="repository">The repository for partial view file operations.</param>
-    /// <param name="logger">The logger instance for logging operations.</param>
-    /// <param name="userIdKeyResolver">The resolver for converting user keys to IDs.</param>
-    /// <param name="auditRepository">The repository for audit logging (obsolete).</param>
-    /// <param name="snippetCollection">The collection of available partial view snippets.</param>
-    [Obsolete("Use the non-obsolete constructor instead. Scheduled for removal in Umbraco 19.")]
+    [Obsolete("Use the non-obsolete constructor instead. Scheduled for removal in Umbraco 18.")]
     public PartialViewService(
         ICoreScopeProvider provider,
         ILoggerFactory loggerFactory,
@@ -76,23 +81,12 @@
             logger,
             userIdKeyResolver,
             StaticServiceProvider.Instance.GetRequiredService<IAuditService>(),
-            snippetCollection)
+            snippetCollection,
+            StaticServiceProvider.Instance.GetRequiredService<IOptions<RuntimeSettings>>())
     {
     }
 
-    /// <summary>
-    ///     Initializes a new instance of the <see cref="PartialViewService" /> class.
-    /// </summary>
-    /// <param name="provider">The core scope provider for managing database transactions.</param>
-    /// <param name="loggerFactory">The factory for creating loggers.</param>
-    /// <param name="eventMessagesFactory">The factory for creating event messages.</param>
-    /// <param name="repository">The repository for partial view file operations.</param>
-    /// <param name="logger">The logger instance for logging operations.</param>
-    /// <param name="userIdKeyResolver">The resolver for converting user keys to IDs.</param>
-    /// <param name="auditService">The service for audit logging.</param>
-    /// <param name="auditRepository">The repository for audit logging (obsolete).</param>
-    /// <param name="snippetCollection">The collection of available partial view snippets.</param>
-    [Obsolete("Use the non-obsolete constructor instead. Scheduled for removal in Umbraco 19.")]
+    [Obsolete("Use the non-obsolete constructor instead. Scheduled for removal in Umbraco 18.")]
     public PartialViewService(
         ICoreScopeProvider provider,
         ILoggerFactory loggerFactory,
@@ -111,13 +105,40 @@
             logger,
             userIdKeyResolver,
             auditService,
-            snippetCollection)
+            snippetCollection,
+            StaticServiceProvider.Instance.GetRequiredService<IOptions<RuntimeSettings>>())
+    {
+    }
+
+    [Obsolete("Use the non-obsolete constructor instead. Scheduled for removal in Umbraco 18.")]
+    public PartialViewService(
+        ICoreScopeProvider provider,
+        ILoggerFactory loggerFactory,
+        IEventMessagesFactory eventMessagesFactory,
+        IPartialViewRepository repository,
+        ILogger<StylesheetService> logger,
+        IUserIdKeyResolver userIdKeyResolver,
+        IAuditService auditService,
+        PartialViewSnippetCollection snippetCollection)
+        : this(
+            provider,
+            loggerFactory,
+            eventMessagesFactory,
+            repository,
+            logger,
+            userIdKeyResolver,
+            auditService,
+            snippetCollection,
+            StaticServiceProvider.Instance.GetRequiredService<IOptions<RuntimeSettings>>())
     {
     }
 
     /// <inheritdoc />
     protected override string[] AllowedFileExtensions { get; } = { ".cshtml" };
 
+    /// <inheritdoc />
+    private bool IsProductionMode => _runtimeSettings.Value.Mode == RuntimeMode.Production;
+
     /// <inheritdoc />
     protected override PartialViewOperationStatus Success => PartialViewOperationStatus.Success;
 
@@ -189,17 +210,45 @@
 
     /// <inheritdoc />
     public async Task<PartialViewOperationStatus> DeleteAsync(string path, Guid userKey)
-        => await HandleDeleteAsync(path, userKey);
+    {
+        if (IsProductionMode)
+        {
+            return PartialViewOperationStatus.NotAllowedInProductionMode;
+        }
+
+        return await HandleDeleteAsync(path, userKey);
+    }
 
     /// <inheritdoc />
     public async Task<Attempt<IPartialView?, PartialViewOperationStatus>> CreateAsync(PartialViewCreateModel createModel, Guid userKey)
-        => await HandleCreateAsync(createModel.Name, createModel.ParentPath, createModel.Content, userKey);
+    {
+        if (IsProductionMode)
+        {
+            return Attempt.FailWithStatus<IPartialView?, PartialViewOperationStatus>(PartialViewOperationStatus.NotAllowedInProductionMode, null);
+        }
+
+        return await HandleCreateAsync(createModel.Name, createModel.ParentPath, createModel.Content, userKey);
+    }
 
     /// <inheritdoc />
     public async Task<Attempt<IPartialView?, PartialViewOperationStatus>> UpdateAsync(string path, PartialViewUpdateModel updateModel, Guid userKey)
-        => await HandleUpdateAsync(path, updateModel.Content, userKey);
+    {
+        if (IsProductionMode)
+        {
+            return Attempt.FailWithStatus<IPartialView?, PartialViewOperationStatus>(PartialViewOperationStatus.NotAllowedInProductionMode, null);
+        }
+
+        return await HandleUpdateAsync(path, updateModel.Content, userKey);
+    }
 
     /// <inheritdoc />
     public async Task<Attempt<IPartialView?, PartialViewOperationStatus>> RenameAsync(string path, PartialViewRenameModel renameModel, Guid userKey)
-        => await HandleRenameAsync(path, renameModel.Name, userKey);
+    {
+        if (IsProductionMode)
+        {
+            return Attempt.FailWithStatus<IPartialView?, PartialViewOperationStatus>(PartialViewOperationStatus.NotAllowedInProductionMode, null);
+        }
+
+        return await HandleRenameAsync(path, renameModel.Name, userKey);
+    }
 }