We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 50077
    • 8 Posts
    Hi

    I have set up various CMPs using MIGX and have also created policy templates and access policies to hide them from the menu for specific user groups.

    However, if a user who should not be allowed to view the CMP guesses the URL, they still have access.

    How can I stop this, I can't seem to find much info about it.

    Should I be creating my own controller to check the permissions?

    Thanks

    This question has been answered by Bruno17. See the first response.

    • discuss.answer
      • 4172
      • 5,888 Posts
      a simple way could be to create php-config-files.
      The name needs to be

      components/{yourpackage}/migxconfigs/{nameofyourmigxconfig}.config.inc.php

      this is running after reading the config-array and before any processor.

      You can do some permission-checks there, modify the config-array or exit with an error-response.
        -------------------------------

        you can buy me a beer, if you like MIGX

        http://webcmsolutions.de/migx.html

        Thanks!
        • 50077
        • 8 Posts
        Great! That worked.

        Thanks so much for your help again.
          • 4172
          • 5,888 Posts
          I'm glad you got it sorted.
          Do you want to post your solution?
            -------------------------------

            you can buy me a beer, if you like MIGX

            http://webcmsolutions.de/migx.html

            Thanks!