-
MODX Staff
- 10,725 Posts
In Evo/0.9.x, if you protect Resources with a web user group connected to a Resource Group, in order to access those Resources from the front-end, you must login as a web user who is a member of that web user group.
Quote from: OpenGeek at Aug 16, 2009, 11:57 AM
In Evo/0.9.x, if you protect Resources with a web user group connected to a Resource Group, in order to access those Resources from the front-end, you must login as a web user who is a member of that web user group.
What’s the thinking on keeping the default admin from accessing those documents in the front end?
-
MODX Staff
- 12,272 Posts
Apparently, not a whole lot. Ah the joys of legacy baggage! This should probably be sorted out at some point in the future.
Ryan Thrash, MODX Co-Founder
Follow me on Twitter at @rthrash or catch my occasional unofficial thoughts at thrash.me
-
MODX Staff
- 10,725 Posts
The security is treated differently between front-end and back-end access because of the separation of manager and web users. The preview used to work for default admins, but it may have been changed so that the parser thinks it is coming from the front-end.
Quote from: OpenGeek at Aug 16, 2009, 05:51 PM
The security is treated differently between front-end and back-end access because of the separation of manager and web users. The preview used to work for default admins, but it may have been changed so that the parser thinks it is coming from the front-end.
I could see it as speed issue. It would slow things down a little to have the parser constantly checking to see if the user was *the* default admin.
I know it used to work, as you say, and it caught me by surprise when it didn’t in Evo.
Are you just talking about the preview tab here?
It’s nice to test the restricted pages front-end being logged in both as manager user and as web user.
Instead of having to log out (case: public computer - one browser).
I vote that what is discussed in this thread would only affect the preview tab.
...I have to log in 5-6 times on my page to check if the changes I did for different user-groups
are working right. Now if I was admin and I saw everything no matter what. I would have to log out from the manager
in between the 5-6 times to correct thing... (case: public computer - one browser)
With more than one browser it’s ok, but I really like the way it is front-end right now.
About the preview tab and Maxigallery - If the site only have back-end managers don’t set webusers/groups for Maxigallery! No?
