Truvio.Commerce.PowerTools
0.2.0-beta
See the version list below for details.
dotnet add package Truvio.Commerce.PowerTools --version 0.2.0-beta
NuGet\Install-Package Truvio.Commerce.PowerTools -Version 0.2.0-beta
<PackageReference Include="Truvio.Commerce.PowerTools" Version="0.2.0-beta" />
<PackageVersion Include="Truvio.Commerce.PowerTools" Version="0.2.0-beta" />
<PackageReference Include="Truvio.Commerce.PowerTools" />
paket add Truvio.Commerce.PowerTools --version 0.2.0-beta
#r "nuget: Truvio.Commerce.PowerTools, 0.2.0-beta"
#:package Truvio.Commerce.PowerTools@0.2.0-beta
#addin nuget:?package=Truvio.Commerce.PowerTools&version=0.2.0-beta&prerelease
#tool nuget:?package=Truvio.Commerce.PowerTools&version=0.2.0-beta&prerelease
Truvio PowerTools
A growing suite of admin power tools for Dynamicweb 10 by JustDynamics — one backend app, one install, its own PowerTools area in the administration, published as a NuGet package (visible in the DW10 admin Available apps list).
Compatible with Dynamicweb 10.8 and newer (the published package is compiled against the 10.8 API; hosts below 10.23/10.24 get solid instead of outlined badges and no screen subtitles — everything else is identical).
Found a problem or have an idea? Report it on GitHub.
Tools
| Tool | Section | What it does |
|---|---|---|
| Security Viewer | Security | Pick a security account — a frontend role, a user group, or a user — and see exactly what content that account can access, across pages, grid rows, and paragraphs. Built for business users who use permissions for personalisation and need to verify who sees what. |
| Access Warnings | Security | Install-wide misconfiguration findings: ineffective group grants, gated sign-in pages, ignored legacy permission columns, orphaned grants. |
More tools are planned; each lands in its own section of the PowerTools area.
Screens
All screens live in the dedicated PowerTools area of the admin navigation (between Apps and Settings), grouped into per-tool-family sections. The area's sections are visible only to users with access to the respective tools.
| Screen | What it shows |
|---|---|
| Security Viewer | Pick the account to inspect (roles, groups, users) — searchable (name, username, e-mail, group name) and paged. |
| Content access | Every page with the account's effective level, its origin (set here / inherited / role default), and gating warnings. |
| Page audience | Drilldown for one page: the page verdict, then each grid row and paragraph with visible/hidden and the winning grant or deny. |
| Warnings | Install-wide misconfiguration findings (see below). |
Warning rules
| Rule | Severity | Finds |
|---|---|---|
| SECOPS-W1 | Critical / Warning | Group grants that don't gate: highest-wins resolution lets the broad frontend roles override a bare group grant unless the entity also carries an explicit deny for them. |
| SECOPS-W2 | Critical | A sign-in page (UserAuthentication app) that is itself denied to Anonymous or inactive — the anonymous-deny redirect flow dead-ends. |
| SECOPS-W3 | Warning | Populated legacy permission columns the DW10 runtime ignores — a false sense of gating. |
| SECOPS-W4 | Info | Permission rows referencing deleted groups. |
How resolution is modelled
The viewer mirrors DW10's render-time rules: permission rows live in the permission entity store keyed per page/grid row/paragraph; each identity of an account (frontend roles + groups) contributes its explicit row or its role default (frontend roles default to Read); the highest contribution wins; pages without rows inherit from the nearest ancestor carrying rows; grid rows and paragraphs without rows follow their page. Administrator-type accounts bypass checks entirely and are badged as such. The viewer is strictly read-only.
Install
- App store: DW10 admin → Apps → Available apps → search "PowerTools" → install.
- Package reference: add
Truvio.Commerce.PowerToolsto yourDynamicweb.Host.Suiteproject. - Manual: build, copy
Truvio.Commerce.PowerTools.dllinto the host'sbin\, restart.
Access to the screens can be managed like any other permission: the app registers a
"Truvio PowerTools" permission entity (key truvio-powertools-security-viewer). Per DW
semantics it is open until an admin explicitly manages it; checks fail closed.
Development
dotnet build
dotnet test
Pack happens on build (GeneratePackageOnBuild). Publishing: tag v* → GitHub Actions
tests, packs, and pushes to NuGet via Trusted Publishing.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net8.0 is compatible. net8.0-android was computed. net8.0-browser was computed. net8.0-ios was computed. net8.0-maccatalyst was computed. net8.0-macos was computed. net8.0-tvos was computed. net8.0-windows was computed. net9.0 was computed. net9.0-android was computed. net9.0-browser was computed. net9.0-ios was computed. net9.0-maccatalyst was computed. net9.0-macos was computed. net9.0-tvos was computed. net9.0-windows was computed. net10.0 was computed. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
-
net8.0
- Dynamicweb (>= 10.8.4)
- Dynamicweb.Application.UI (>= 10.8.4)
- Dynamicweb.CoreUI.Rendering (>= 10.8.4)
NuGet packages
This package is not used by any NuGet packages.
GitHub repositories
This package is not used by any popular GitHub repositories.
| Version | Downloads | Last Updated |
|---|---|---|
| 0.9.1-beta | 0 | 8/24/2026 |
| 0.9.0-beta | 0 | 8/24/2026 |
| 0.8.0-beta | 0 | 8/24/2026 |
| 0.7.0-beta | 0 | 8/24/2026 |
| 0.6.0-beta | 0 | 8/24/2026 |
| 0.5.1-beta | 34 | 8/23/2026 |
| 0.5.0-beta | 35 | 8/23/2026 |
| 0.4.0-beta | 30 | 8/23/2026 |
| 0.3.0-beta | 35 | 8/23/2026 |
| 0.2.0-beta | 37 | 8/23/2026 |