ACL, Manager user and frontend docs access#

Hi,

I'm playing a little with MODx Evolution and I have problem with access control (or I do sth wrong).

1) I created web user group, resource group for docs and linked them together (so registered and logged user can have access to the documents from his web group).
2) Created document and assigned it to the web resource group (created in step 1).

In doc properties I have:

Status: Published
Cacheable: No
Web access: Private
Manager access: Public

Now:
- logged web user can access document normally - which is fine
- logged manager (working on the frontend) doesn't see the document (can see it only from the backend).

Question is why document assigned to the web resource group is not visible by the manager user working on the frontend?
(by Manager I mean Administrator)

thx
demagy


--EDIT
Sorry - I've just realized I messed up with MODx version - It's EVOLUTION (1.0.0)

Quote from: demagy at Oct 15, 2009, 03:22 PM

Question is why document assigned to the web resource group is not visible by the manager user working on the frontend?
(by Manager I mean Administrator)

Because in Revolution, things work a bit different by permissions. You haven't given your Admin access to the Resource Group for that Context. He has access to edit it on the back-end, but you have to give him specific Context access to the front-end to view it.

In other words, permissions are specific to the Context. If you want someone to see something in the 'web' and 'mgr' Contexts, you need to give them to ACLs to do so.

Quote from: demagy at Oct 15, 2009, 03:22 PM

- logged web user can access document normally - which is fine
- logged manager (working on the frontend) doesn't see the document (can see it only from the backend).

Question is why document assigned to the web resource group is not visible by the manager user working on the frontend?
(by Manager I mean Administrator)

In Evolution, web users and manager users are separate entities; in order for a user to see a protected web resource, that user must be logged into the front-end. Being logged into the manager has no effect on this.

There's some information on Evolution permissions here: http://bobsguides.com/permissions.html

Hi,
I had the same problem and I found this post: http://modxcms.com/forums/index.php/topic,2322.0.html.
Basically, it automatically logs in/out any manager user as a web user too, thus allowing this manager user to access specific documents in the front-end. You only need to create a particular web user, type its log/pass into the plugin code and grant it access to the desired documents via usual web permissions.
That solved the problem!

Nico
--
Evo 1.0.2