Resource Group doesn't work, User sees complete Resource Tree

Hi

I tried to create a user who only can see the resources of one Resource-Group. BUT the user sees the complete Tree.

What i did:

1. Created a Resource Group
   
2. Added a Resource to the Group
3. Added the Resource Group to the User Group (Galleries > Super User - 0 > Resource > mgr)
4. Added the User to this User Group as superuser (User is not an Admin)
5. Right: web > superuser > Content Editor || mgr > superuser > Content Editor

Maybe someone can help me [ed. note: stefan79w last edited this post 9 years, 6 months ago.]

Bob has a really extensive guide on this here:

https://bobsguides.com/hiding-resources-in-the-manager.html

It can be a lot to get your head round.

Yes, read it twice, but in my opinion i did exactly what i should do

Quote from: lkfranklin at Mar 23, 2017, 09:09 AM

Bob has a really extensive guide on this here:

https://bobsguides.com/hiding-resources-in-the-manager.html

It can be a lot to get your head round.

Ah, Brainfuck. Do i have to generate 2 Resource Groups?

1. One with the Resources the User is allowed to see
   
2. One with the Rest, to hide them for users which should not see them?

But what if there are new Resources for example a News.
Do i have to add them to the second group to hide it for the User?

Yes I usually create a 'locked' resource group also which only admins have access to.

There's an extra called 'defaultresourcegroup' you can use also:
https://bobsguides.com/defaultresourcegroup-tutorial.html

You can use the DefaultResourceGroup extra to put all new resources in the protected group.

FYI, putting a resource in a Resource Group does nothing to protect it.

What hides the resource is if it's in a Resource Group and that Resource Group is connected to a User Group with a Resource Group Access ACL entry -- AND - the current user isn't a member of that User Group.

The full story (about 50 minutes worth) is here: https://vimeo.com/54360208