I Don't Understand: (Backend Users, Permissions, Generally MODx Revolution)

Quote from: goldsky at Jan 06, 2011, 09:37 AM

When a RG is applied to a resource, then anonymous access will be denied.

I don’t think this is the case.
I created a resource group, and applied it to a resource.
I then logged in as an editor, so does not have this RG associated with their UG, I could still view and edit the resource.
Is this what you mean?

View & Edit = actions.
They are managed by roles & access policy

Visibility also depends on context (mgr / web)

Quote from: goldsky at Jan 06, 2011, 09:54 AM

View & Edit = actions.
They are managed by roles & access policy

Visibility also depends on context (mgr / web)

I give up i’m just going to use evo :0
(Joking)
I’ll have to change my sig to MODx, because it makes things easy, apart from permissions in Revolution!!

Thanks for the help, still not getting what I want, some of my access pol are not showing in the dropdown....which is also concerning me.

Well... before you really give up,

7. Click on Security -> Flush Sessions and re-login.

Quote from: goldsky at Jan 06, 2011, 10:32 AM

Well... before you really give up,

7. Click on Security -> Flush Sessions and re-login.

Lol - I tried that
Should all the Access Permissions be available to me?? See img attached.
I cannot see some of them, and think that this might be causing the problem?

Quote from: jusmeig at Jan 06, 2011, 09:23 AM

How do I hide all resources in the manager from an Editor user, except one (or two or 3)
My approach, was....and still would be:
Stick resources in group, ensure guy above is not in group -> done.

What else the story?

Quote from: goldsky at Jan 06, 2011, 11:00 AM

What else the story?

Sorry I don’t follow?

Quote from: jusmeig at Jan 06, 2011, 10:44 AM

Should all the Access Permissions be available to me?? See img attached.
I cannot see some of them, and think that this might be causing the problem?

No, that’s normal. Only the permissions relevant for that kind of ACL are shown.

It sounds like you might be confusing Context Access ACLs and Resource Group Access ACLs.

Context Access ACLs control what the user can do in general in the manager. Policies here are based on some version of the Administrator policy.

Resource Group Access ACLs control what users can do with a particular resource *object*. Policies here are based on some version of the Resource Policy.

Stick resources in group, ensure guy above is not in group -> done.
This approach is failing in Revo, cheat sheets, bob’s guides and 20 forum posts later.

That would fail in Evolution also. You need to connect the user group to the resource group.
In Revolution, that means selecting Update for the user group and creating a Resource Group Access ACL entry. Specify the resource group, the context where you want to hide the docs (’mgr’) a role and a policy.

Quote from: BobRay at Jan 06, 2011, 01:55 PM

That would fail in Evolution also. You need to connect the user group to the resource group.

Sry my bad. In Evo I put resources in resource group, I assign RG to a user group, then stick the user in that group....done
Thank you for taking the time to reply, but again I’m afraid I have no idea how to implement what you suggested.

To say i’m confused would be the understatement of the century
Can I PM someone a login who would not mind taking a look. If you can setup a basic structure it might make more sense to me.
It would be greatly appreciated!

Think I have this sorted now, thank you all for the help.
My 13 point solution sits here:
http://modxcms.com/forums/index.php/topic,59413.msg338383.html#msg338383

Sorry for hijacking this thread