Hi guys,
I’m getting this message: Because the Web User Groups and Manager User Groups conflict for your Role, this Resource will be public. Contact a site administrator for further help.
I have setup Manager Permissions - Developer/Developer docs
- In here I have placed all my docs with snippet calls etc. (to hide them from the below)
I setup a new role called "Editor" and created a new Manager User who is not part of Developer. (The group above)
- This hides the docs above. This editor user has access to Web Permissions and Web Users.
The problem now is I get the message above. Editor needs to be able to set Access Permissions on docs not in developer, but the options are hidden by the message above?
Is this making any sense!!!
J
Edit: None of the developer docs are in the web user groups, so I cant see where the conflict exists.
I’m not sure I understand your situation, but see if any of this helps:
http://www.bobsguides.com/permissions.html.
Here’s the code from manager/actions/mutate_content.dynamic.php that triggers that message:
$permissions_yes = 0; // count permissions the current mgr user has
$permissions_no = 0; // count permissions the current mgr user doesn't have
// ...
// does user have this permission?
$sql = "SELECT COUNT(mg.id) FROM {$tbl_membergroup_access} mga, {$tbl_member_groups} mg
WHERE mga.membergroup = mg.user_group
AND mga.documentgroup = {$row['id']}
AND mg.member = {$_SESSION['mgrInternalKey']};";
$rsp = $modx->db->query($sql);
$count = $modx->db->getValue($rsp);
if($count > 0) {
++$permissions_yes;
} else {
++$permissions_no;
}
$permissions[] = "\t\t".'<li>'.$inputHTML.'<label for="'.$inputId.'">'.$row['name'].'</label></li>';
}
// if mgr user doesn't have access to any of the displayable permissions, forget about them and make doc public
if($_SESSION['mgrRole'] != 1 && ($permissions_yes == 0 && $permissions_no > 0)) {
$permissions = array();
}
// . . .
elseif($_SESSION['mgrRole'] != 1 && ($permissions_yes == 0 && $permissions_no > 0) && ($_SESSION['mgrPermissions']['access_permissions'] == 1 || $_SESSION['mgrPermissions']['web_access_permissions'] == 1)) {
?>
<div class="sectionHeader"><?php echo $_lang['access_permissions']?></div>
<div class="sectionBody">
<p><?php echo $_lang["access_permissions_docs_collision"];?></p>
</div>
I don’t pretend to understand this code fully and the message you’re getting is new in Evo, so you may have found a bug.
jusmeig i have the same problem - have you found a solution ?
I think that the permissions are not well implemented in Evolution >1.0
Hi guys,
I had the same problem and solved it by removing all "Resource Groups" (NOT "Web User groups").
Go to "Security" -> "Web Permissions" -> "Resource Groups" and check out, if there are unused resource groups.
I’ve added (and linked) some resource groups, to try something else out. After that I simply forgot to remove them.
@jusmeig: I can’t see any relationship between Web User Groups, Roles or Managment Users as well.
Cheers,
Chris.
I come back to this again!!!
There appears to be a problem with the access control for any Manager Users who are not the admin.
When you create a new Manager User (For example and editor). If you do not add at least one:
Manager User groups
Manager Resource Groups
You need to add the user to the group u create then (even if it is blank).
If you do the above your Editor will be able to set the Web Access Permissions for documents!!!
Thanks for this solution jusmeig!
This is definitely a bug and should be addressed. Having to add additional manager users to an arbitrary manager user/resource group just so they can edit resource access permissions is a bit wonky.
*bump*
this happens also on a new installation
