Answered No gear icon - locked out from admin menu

In my Revo 2.4.3 site, I was working on manager customization: my editors user group shall not see the admin menu. This is what I did: logged in as an editor user, opened the edit_menu-tool and klicked off the admin menu.
Result: none of my users can't see the gear icon any more, not even the main admin/sudo user.

This was certainly the wrong way to do it, afterwards I looked through all the manuals and could not recall what I had picked up before.

How to fix? In phpMyAdmin, there is no admin record in the modx_menus table, this looks weird to me. And I can't find the menu settings, which table should I look at?

Can anybody help me, please?

Thanks, Bob, worked partially.

I could recreate the system menu in the menu panel. In the database, there is a new record "system" in the modx_menus table. The menu items were still there, on save they got edited to "parent:system" ("parent:admin" before).

But there is still something missing. The system menu does not show in the manager. I logged out, flushed permissions ... .

What can I do else?

I'm glad that worked.

What version of MODX are you using? I should have mentioned that the values I gave are from V. 2.4.4.

Quote from: BobRay at Jun 25, 2016, 11:31 PM

What version of MODX are you using? I should have mentioned that the values I gave are from V. 2.4.4.

My site is V. 2.4.3, the values I used are from V. 2.5. I looked up the database.

• Parent:usernav is for showing up in the right place. I checked the HTML, on parent:none there is no System/Admin menuitem in the uberbar.
• the icon file reference is wrong, there is no such icon in all MODX. But luckily, the icon CSS code worked out ;-)

Maybe this menu_edit part could need some code review. Anyway, usability/security is not best if you can delete basic features without warning.

B.t.w. I'm deeply pissed off by the permissions part, took me a week so far to set up a simple role of editors who can do what they need and not see what they need not. Hopefully, I can pay something back to this helpfull community as soon as I'm through with it.

Best,
Brigitte

B.t.w. I'm deeply pissed off by the permissions part, took me a week so far to set up a simple role of editors who can do what they need and not see what they need not. Hopefully, I can pay something back to this helpfull community as soon as I'm through with it.

We've all been there.

In case you haven't seen it, here's a video of me explaining how the permission system actually works. It's about 50 minutes, but it might save you more time than that down the road.

https://vimeo.com/54360208

Quote from: BobRay at Jun 27, 2016, 04:53 PM

In case you haven't seen it, here's a video of me explaining how the permission system actually works. It's about 50 minutes, but it might save you more time than that down the road.

https://vimeo.com/54360208

Very helpfull, indeed.

After all, I found everything working like it's said in the manuals. A lot of stuff, hélas! Misunderstandings came from wording, I had some iterations to go through until I could tell "role" from "user group" and "administrator" from "super user". Finally, I named my editors user group "content-administrator", to be clear with it, as they need full rights on ressources and media.

How came that I messed it up with this menu part: forgot to flush permissions after setting the menu permissions in ACL, so I could see no effect and looked elsewhere to go for my goal.

But now I'm happy - or will be, as soon as all my image TVs will be updated (protected file system). You cannot point out too often that permissions should be set before content is added !!!

Thanks again.
Brigitte [ed. note: BrigitteB last edited this post 10 years, 3 months ago.]

I'm glad I could help. By far the biggest stumbling block for people new to the Revolution permissions system, imo, is that natural assumption that roles should be used to control what people can do and see.

Revo 2.5 Bug
Now I know better what knocked me out. I was working parallel on several installs, and in Revo 2.5, there is a bug.

Revo 2.5 Bug: ACL permission menu_system (or is it menu_tools - the wording is not clear): I deactivate all menu settings, but the system menu = gear icon will not go away.

Workaround: hide it by CSS, it is #limenu-admin. Put it in a plugin like here: https://forums.modx.com/thread/29267/don-t-show-help-button-in-resources-details?page=2#dis-post-543083 [ed. note: BrigitteB last edited this post 10 years, 3 months ago.]