Remove Developer Toolbar In Production Environment

[MS5]

Hello everybody,

I've been developing an application on DEV environment and, after finishing it, I moved it to PRO environment. However, the following toolbar shows up to my users and it doesn't have to, because it is solely for developing purposes:

The users that suffer from this are not admin. What could be causing this?

Thank you!

[OliverRodrigues]

Hi, you can remove that by simply deactivating the below "Web Page Access Control Rule":

[Fubar]

You can also just remove the out of the box "Administrator" Web Role from the Contact record.

[MS5]

Thank you for your reply, Oliver.

I tried your proposed solution and it works. However, I think that's like killing a mosquito with a gunshot.

I think there might be something there causing authenticated users to be recognized as administrators. Look at this, does it say anything to you?

I don't want to touch anything until I'm sure that's the root cause. Please, tell me if I'm right about this.

Thank you!

[Fubar]

@MSS set it to No (Yes is not the default setting, someone has changed it without realising what it means).  Authenticated Users Role = Yes means that any logged in user will inherit the Web Role and be able to do stuff you do not want them to (if multiple Roles as set to Yes only one will get inherited).

https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/create-web-roles 

[OliverRodrigues]

Hi, well, that Web Page Access Control Rule is specific to enable the front-end editor.

Your admin user will still be able to clear the cache if needed. I don't feel like is an overkiller solution.

You can remove that option as well from a few Web Templates (would require a good bit of re-factor), but there would be more that you can't access directly from the source code

[OliverRodrigues · Accepted solution]

in regards your snapshot of the Web Role.

The "Authenticated Users role" checkbox means that that Web Role is always assigned to a user once they sign in to your Portal. We should have only one Web Role with that enabled, and that shouldn't be the Admin web role, more likely to be the Authenticated Web Role or a custom one.

The web role is automatically assigned but you can't see under the Contact record that they have it, it is a special flag I'd say.

[MS5]

Thank you very much, Oliver, and excuse me for delaying my reply. This absolutely was the issue and I fixed it by switching it off.