User roles / Web-login in Revo

I’m looking at using Revo for a project that involves housing a lot of reports (created via Snippets). Clients would log-in to the site and be able to view certain reports based on their user permissions. Revo has a flexible user/groups/roles/permissions thing going on, but I haven’t seen this used to offer a forward facing login. We wouldn’t require anyone logging into the manager.... WebLoginPE covered this for Evo, but is there another alternative in Revo? Particularly if the distinction between web-users and manager-users is going away?

One thought I had was copy the login logic used by manager/index.php into a form for the front-end. Once someone had validated, it would just be a matter of redirecting them to the correct page per their permissions... but this seems laborious, and I’d have to be careful to prevent that login from opening up anything in the manager (because presumably, a successful validation would set certain SESSION variables).

Thoughts?

Everett,

Take a look at the new Login package for Revo. It handles front-end login and redirection to a post-login page. The users will automatically be denied Manager access unless you give it to them.

It also has components for registration, remember me, and forgot password, IIRC.

If the users will stay in the front end, you can also create a site_start User Setting for each of them that should control what part of the tree they see in the front end.

Thanks for the input, Bob... that’s some crazy Revo speak you’re talking heheh. Clearly I haven’t given Revo the trail run I need to in order to know how to get this stuff put into action.

Ok, wow, that was much easier than I anticipated. Hi-fives to the guys who wrote this stuff.

Ok, what if I up the ante: how would it be possible to tie in some additional validation logic to the logins, e.g. to verify that a certain user had paid up his account before he gets to see a juicy report?

Hi Everett


In Revo you can create key fields like *paid_up* then use that field to allow access to other pages or you could change their user group if fees paid.

You can also add your own validation rules using a snippet, example is given in default registration form.

A lot of the power of WLPE is already in Revo login as far as I can see.

If you take a look at :-
http://modxcms.com/forums/index.php/topic,47278.msg278875.html#msg278875

OpenGeek shows us how to work with the new Revo code.

Hope this helps

Good link. Thanks!