-
- 18 Posts
Hi there,
I hope you would be able to help me figuring out what going wrong here.
On a MODX Revolution 2.5.7-pl, i'm trying to add a new user with "custom" rules policies but no matter what i'm trying to select, all the rules are ignored and the user is still considered as an full administrator.
I did the exact same thing on the developement version of this site, hosted on a private server and everything went well...
So i'm wondering what kind of server configuration can cause so much trouble?
Any ideas?
Thank you all.... it's driving me crazy
Any chance the user is created as a sudo user? Go to Manage > Users, edit the user, and see if the checkbox by Sudo is ticked. Sudo users have all permissions, no matter their group assignments, and are meant as super administrators.
Alternatively, try logging out and back in again (or wiping all sessions through Manage > Flush your permissions or Logout all users) to make sure you're not seeing cached permissions.
-
- 247 Posts
Dumb question, and I'm sure the answer is yes, but did you check to make sure your custom policy made the transfer? If you altered an existing policy instead of creating/duplicating a new one and performed a reinstall of any kind it would revert back to the default settings for that policy.
-
- 24,544 Posts
Make sure the user is only a member of one group, and that it's not the Administrator group.
Make sure you created a Context Access ACL entry with a context of 'mgr' for this user's user group.
Be sure to flush sessions (not just permissions) before testing, and test from a browser where you're not logged in to the Manager.
-
- 24,544 Posts
Is the problem with access to menus and actions in the Manager, or access to Resources, or something else?
Be sure you're testing from another browser where you're not logged into the Manager.
Clearing the browser cache and cookies is another thing to try.
-
- 571 Posts
It couldn't be related to the issue with an
.htaccess file containing
php_value session.auto_start 1 mentioned here could it?
https://forums.modx.com/thread/102715/resource-groups-protected-pages-seems-broken#dis-post-553262