[Solved] Creating a safe Web User comment system?

For some reason I am really battling with this and not finding any decent documentation on what I want to do.

I have a site for a two person enterprise that offers spiritual/religious retreats. A section of the site includes a journal system written by one of these ladies. She would like to allow people she is comfortable with to add comments to her posts. She wants to know who they are first and avoid spam and porn posts etc.

So, I am thinking about building a WebLoginPE, Ditto and Jot system to do this.

I have the Ditto working: a Container page that holds all the Journal posts etc. I have also successfully installed WebLoginPE. It works. I have set these two ladies up as Editors. I want them to be able to see the folks who have registered with WebLoginPE and then individually add them to a Web User group. If they do not know the people who registered then I want them to have the control to exclude them from the Web User group. Lets call this group "Comments."

I think I then need Jot in each Journal post to allow people to comment on the posts. How do I set up the Jot call so that it (the comment box) will only display for Registered Logged In Web Users (Comments)? I do not want the comments input box to appear for people who have not logged in. In other words all the word can see the Web User comments but only logged in users can actually comment.

I am having a hard time figuring out what Snippet call goes with the correct Access permissions to make all this work. If I add a Resource Group via the Resource Access Permissions pane that page then disappears from the site? I have been going around and around with this. My head hurts.

Please help and explain this in easy language if possible.

Thanks!

You can add a parameter to your Jot snippet call which will allow only users who are in the specific groups you denote in the parameter to post comments. This parameter will accept a comma delimited list of group names. Note that the documents do not have to be in any resource group for this to work.

I can sort of get there. I can create that Jot call but it shows even if I am not logged in? I do not want the comment box to be public for the whole world, just those who are logged in?

You have to be also logged out of the manager, or the form will still show. Close out all windows and return to the web page as a normal visitor and the comments should show, but not the form.

The comment entry box is still showing even if I am not logged out of the Manager. It will also show if I have not logged in from the front end using WebLoginPE.

Obviously I am missing some pieces here...

I am basing this on a stock install of Evolution 1.0.1 with the default content installed. I added the &canpost=`Groupname` parameter to the Jot call found in the {{Comments}} chunk and it works fine. If you are logged in to the manager, you will see the form if you hit preview for the page.

You have to be logged out of everything, then view the page again and the form won’t show. Maybe a close/reopen browser too might help.

Still not working: the box still shows all the time:

This is the call I am using on the sample Journal page:


I have created a Web User Group called "Friends".
I have created a Resource Group called "Onlyforfriends".
I have created a link between "Friends" and "Onlyforfriends".

I want the Journal page to be viewable for everyone. I want the Jot comment box to be viewable for those Actual "Friends" Web User group members who have logged in with WebLoginPE.

Not sure what I am missing here. Right now the Jot comment box is there all the time for anyone to see and use...

Try calling the snippet uncached: [! !] instead of [[ ]]

Brilliant!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

As you can tell I am psyched to get this solved!

Thank you! Thank You! Thank You!

Max

Your very welcome