We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 2407
    • 54 Posts
    I’ve started to hire people I have not yet given them access the manager, how do I protect my site from being attacked from the inside? is there anyway to moderate entries created by them? and can I stop the deletion of entries?
      • 28042 ☆ A M B ☆
      • 24,524 Posts
      That’s what "roles" are for. Set up roles with the limitations you want, then assign your users to these roles.

      View a Resource’s data
      Create new Resources
      Edit a Resource
      Save Resources
      Publish Resources
      Delete Resources
      Permanently purge deleted Resources
      Edit Resource META tags and keywords
      Empty the site’s cache
      View Unpublished Resources
      The "Edit a Resource" actually only allows viewing the resource, any changes to the resource content can’t be saved unless "Save Resource" is also allowed.

      Deleted resources just show a red line through them in the tree and are flagged in the database; they aren’t actually removed until the "trash can" in the tree menu is emptied. So you can allow the Delete Resources, but not the Permanently purge deleted Resources.
        Studying MODX in the desert - http://sottwell.com
        Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
        Join the Slack Community - http://modx.org
        • 2407
        • 54 Posts
        Thanks I will give that a try now.