I’m very confused by the new Revo security setup.
How do I create a user who can log in to the manager but the ONLY thing they can do is edit/add content?
I do NOT want them touching the Elements.
Resources only.
Create a user group for the user(s) called Editors.
Create a role called "Editor" with an authority level of 5.
Add the users to the group with the Editor role.
In Security ->Access controls -> Policies tab, duplicate the standard Administrator policy - call it EditorAdmin.
On the User Groups tab, right-click on the Editors group and select "Update user group"
On the Context Access tab, add an ACL entry with a context of mgr, a role of Editor and a policy of EditorAdmin.
Make sure the users can log on and see everything (You may need to give the group another Context Access ACL entry for the ’web’ context - also with a policy of EditorAdmin).
Now, in Security->Access Controls->Policies tab, edit the EditorAdmin policy. Remove the file_tree and element_tree permissions and the access_permissions permission. Save the policy.
Flush permissions and sessions on the Security menu.
Now the file tree and the element tree should be hidden from those users. You can also remove any other permissions you want to from the EditorAdmin policy (e.g., create_user, steal_locks, etc.), but there’s no need to remove the permissions related to elements and files since the users can no longer access them.
Thanks for that!
Wow. Seems really complicated! Wasn’t it way easier in Evo??
Will try it now...
Thanks Bob!
Your awesome documentation and helpful posts (like this one) are GREATLY appreciated...
Thanks for the kind words.
