Permissions - restricting access to select folder in the files tab .

Hey Guys, I’ve made a login for the person who will be responsible for updating the content of a relatively simple site I’ve made. I’ve removed access to the Elements tab but I’ve left access to Files, all I want them to be able to do upload images to the images directory, and PDF files to another directory, is this possible? At the moment they can see the entire contents of what is in the FTP which isn’t really ideal. I’ve tried searching this forum but I never seem to have much luck with results to my queries. Any help much appreciated

Unfortunately you can’t restrict it at a user level in Revo at present (it’s a bug). Use the system setting ’setting_filemanager_path’ with a value of ’/assets/images’ or whatever you want to restrict the starting point of the Files tree (for all users, including yourself - assuming you have access via SSH or FTP).

Thanks for the reply, that solution will work for me.

Cheers,
Greg.

Quote from: odeclas at Feb 08, 2011, 01:17 PM

Unfortunately you can’t restrict it at a user level in Revo at present (it’s a bug). Use the system setting ’setting_filemanager_path’ with a value of ’/assets/images’ or whatever you want to restrict the starting point of the Files tree (for all users, including yourself - assuming you have access via SSH or FTP).

Buddy at this video did exactly this (restrict Files at the User level in Revo)

http://www.youtube.com/watch?v=3mw0jLNVFp0

I need this restriction capability as well except when I do what he does, which somehow works for him, I still get the full Files tree displayed. I could, however, successfully change it in the System Settings, but this isn’t practical. I only want to set this restriction for my client accounts.

How did this guy pull it off if it’s a bug? Is it a version specific bug? Im using 2.0.7-pl. If I can get this to work Im hoping Im well on my way to understanding this Security monstrosity.

Try setting the filemanager_path System Setting to the restricted area and then set a filemanaget_path user setting for admin that gives you access to the root.

Same problem, just the other way around. Nothing I set allows me access to all Files.

The bug is listed against Revo 2.0.5+ . The video is of Revo 2.0.4-pl2

Update - Resolved on GitHub http://bugs.modx.com/issues/3427

Thanks odeclas. Is there an expected 2.1 release date?

Now that all of the settings that made this work are deprecated in Revo2.2, how does one restrict access to select folder in the files tab? The entire file tree is now accessible, which is a disaster waiting to happen.

AFAIK, it's rb_base_dir and its companions that are deprecated. The replacement is the filemanager_path System Setting.