Hi there, i’m currently building a site for a music venue. They have events that are set up so the admin inputs all the data however they would like it so the promoters of the events can upload their own events. Can I do this by giving the promoters access to the events folder and giving them the ability to simply add a new event and not touch anything else, is that possible / the best way to do it?
Thanks in advance
Revo. Although I just read your article on users Bob so I think my wording above is incorrect I seem to be using Evo terminology.
Right, web users is an Evolution term. I assume that you’ve seen this:
http://bobsguides.com/revolution-permissions.html, although I think your best bet might be to just create a login page and use a form with FormIt in the front end to let the users enter the events. There are some events packages around, but I don’t think any have been converted to Revolution yet.
Right, thanks Bob, i’m with you, would it be possible to have them publish that automatically or will it get sent to the admin to input it to the backend? Fom what I read in your article it seems I could lock them down to the events folder only and set permissions to create new documents only? Or have I got that wrong?
If you’re letting them do it in the Manager, you can definitely give them permission to publish the new resources (or not). In the front end, you’d be writing a custom snippet so you could handle it however you wanted.
TBH, I’m not sure which way I’d go. If there were a lot of users and I didn’t know them, I’d probably want to keep them out of the Manager (though there are certainly ways to let them in and still protect things). If your PHP skills are limited, that would probably be the best choice, but you’d want to give them a carefully restricted Context Access policy (based on the standard Administrator policy) for access to the Manager.
Hi Bob, thanks for your help its much appreciated. Yeah these will be trusted people and only say 3 or 4 so it isn’t an issue giving them manager access, and yes unfortunately my php skills are limited! Is it possible to simply lock them down to one folder?
You’re in luck. If they’re trusted, you can just set a create a tree_root_id user setting (on the Settings tab of when updating a user) with the ID of the folder you want them to have access to and they will only see that part of the tree.
Create a Role for them before adding them to user the group. Give it an authority level of 15 and assign that role to each user when you add them to the user group.
Next, create a user group for them and add them to the group with the role you created.
You’ll need two Context Access ACL entries to let them log in (one for the mgr context and one for the web context). I’d suggest duplicating the Content Editor policy (right-click on it and select "duplicate") and using that duplicate for both of them. You create the Context Access entries by right-clicking on the user group and selecting "update," then selecting the Context Access tab.
If they need to upload files (as opposed to just creating resources), you’ll need to edit the duplicate policy and check some permissions like file_tree and any other permissions related to uploading files. You might then want to create a file_manager_path with the path to the directory they can upload files to.
Wow, Bob that is PERFECT for my needs. Thank you. I’ll let you know how I get on!
