I am hoping to gain some insight on the MODx user groups and edit rights arena.
Say I have a sight with a working login system (WebLoginPE) and Web User system. This is working great with individual MaxiGalleries etc.
I have a series of pages that deliver articles with Ditto and Jot.
I would like to allow these Users to edit these articles. From I am learning having them log in as Web Users will not allow them to edit these pages from the front end (using Quick Edit etc) and I would need them to login as Manager Users?
That will be OK but once I let them into the back end I would like them to be able to edit ONLY these article pages and none of the other pages. I did a test where I created a Manager User, created a Document Group and assigned a document(page) to that group. I might have done something wrong (guilty of this before) but I was expecting that the Manager User would only be able to edit just that particular document? All the other public documents were open to editing by this Manager User. I want to avoid this.
What is my way out of this? Do I create a new Documnet Group and assign all the pages I do not want edited by these Manager Users to that group?
Ideally it would be great to have a simple front end editor permission granted to logged in Web Users so they can edit certain specific pages without seeing the back end.
Thanks!
Thanks!
I have not really spent much time exploring Roles yet. Its sort of like a triangulation approach between users (Managers), Documents and Roles?
I’ll take a look...
I think I read that upcoming versions of MODx will have expanded Web User editing permissions?
OK, I think I have made progress, but one major issue remains:
I created a Role called Writers with limited access to back end functions. The only Content Management options available to this Role are: View Documnets, Edit Documents, Save Documents, and Empty the Site’s Cache. No access is given to any of the template, snippet, chunk or User management options.
I then created a test Manager User, " Jim" and assigned him the afore mentioned Writers Role. I then created a Manager User Group called "Editors" and made sure that "Jim" was in the group. I then created a Document Group called "Stories" and assigned two test pages to the Document Group. The rest of the pages I left as public pages. I then linked the Manager Users Group to the Document Group.
I then logged in as "Jim" and all the access options that I set in the Role panel were available to "Jim" while the main Administrator options were not; just the way I wanted.
"Jim" can open, edit and save the documents in the "Stories" Document Group. The problem is that Jim can also edit and save the other documents as well. These are the documents that I did NOT add to the "Stories" Document Group. Am I missing something? I want "Jim" to only be able to edit and save documents that are in the specific Document Group ("Stories") that are connected to his Management User Group...
Do I take all the other documents and assign them to a different Document Group?
This is one of the final pieces to my MODx puzzle.
Thanks!
I think I found a way of doing this. Not sure if this is the best way but it seems to work...
I created a new Role with almost no permissions. I then created a Manager User Group called "Noediting" and a Document Group called "Reserved". All the remaining documents that I did not want to be available for editing by the previously created "Editors" group I added to the "Reserved" Document Group.
Now when one of the "Editors" login the only documents in the tree they see are the ones in the "Stories" Document Group. This way the "Editors" can not intentionally or accidently alter pages I want off limits to then like the Home Page, Calendar, Contact form etc. It seems to work. Before ALL the remaining documents were "public" which were open to the "Editors."
Not sure if this is how others make sure that manager user/editors can only edit the documents they are "allowed" to play with...
I wish I could buy drinks to all those who have helped me in my "learn MODx" journey...
Nice workaround, I’m going to try it, keeping sticky fingers out of areas they shouldn’t be meddling in.
