Access Policies... seeing [object Object]

I’m trying to come up with a few dumbed-down variations on the Administrator access policy, but I’m seeing some funky behavior. I created a new Access Policy which uses the Administrator Template, and then I started unchecking stuff... I don’t want the user to be able to create/edit/delete/view any chunks/snippets/plugins. We’re talking ONLY documents.

So I started unchecking lots of options from the Access Policy, but I’ve ended up with NO pages being visible, and the Files tab shows up with a weird [object Object] message.

Anyone got ideas on this one? I’m sorta "talking out loud" in the forums...

MODx 2.1.3-pl

Uhmm...
Missing the context related, maybe?

I added mgr access... I even tried doing a VERBATIM copy of the Admin Policy, and still I’m seeing that [object Object] thing. Baffled...

I don’t know what would cause that, but just unchecking file_tree and element_tree would restrict them to resources unless they’re clever enough to type in the URL to do the other stuff.

Interesting... I had to add web context access in order for the resource tree to appear (and the [object Object] thing disappear). That one doesn’t make sense to me... I would have thought that the mgr context behaves independently of the web context.

Also, I couldn’t make verbatim entries for some of the other Context Access areas... for example, there is no Access Policy named "Resources" when I go to create my own entry in Context Access, but that’s what the Administrators user group is using... where does that come from?

Quote from: Everett at Aug 02, 2011, 01:23 PM

Interesting... I had to add web context access in order for the resource tree to appear (and the [object Object] thing disappear). That one doesn’t make sense to me... I would have thought that the mgr context behaves independently of the web context.

Normally, the ’web’ context refers to the front end, but a Context Access ACL entry with a context of ’web’ is necessary for the users to have any access to those resources, so if it’s not there, they can log in, but can’t see the web resources in the tree.

Also, I couldn’t make verbatim entries for some of the other Context Access areas... for example, there is no Access Policy named "Resources" when I go to create my own entry in Context Access, but that’s what the Administrators user group is using... where does that come from?

You might be mistaken. The "Resource" policy should only appear when entering a Resource Group Access ACL entry. The Admin Group’s *Context* Access ACL entry should have a policy of "Administrator."

In earlier versions of Revo, you could change that and all policies were shown, so it’s possible that you changed it to Resource before upgrading.

Ah. That’s exactly what I did: I changed it to "Resource" back in 2.0.x something. Thanks Bob!