Creation date, and Chunk permissions

Hi. I have two items currently on my wish list...

1. Ability to reset the creation date to the last edit date.

2. Chunk management permissions in the Role Management section. Currently there are role permissions for most other things, but not chunks.

Somebody discovering MODx rencently asked me why there should be chunks AND snippets and not just one and same thing. I answered it probably was permission related : allowing users to use chunks is potentially not harmful, but snippets contain php and this is a security issue.

I thinks that’s why chunks do not have permissions... but I might be wrong...

Quote from: davidm at Nov 21, 2005, 10:48 AM

Somebody discovering MODx rencently asked me why there should be chunks AND snippets and not just one and same thing. I answered it probably was permission related : allowing users to use chunks is potentially not harmful, but snippets contain php and this is a security issue.

I thinks that’s why chunks do not have permissions... but I might be wrong...

I quite agree. But how do you allow the chunks section to appear for a user in a restricted role?

No one said there’s forever going to be a distinction between the two...

Quote from: rthrash at Nov 21, 2005, 11:51 AM

No one said there’s forever going to be a distinction between the two...

I think it’s good to be able to prevent restricted users from accessing snippets, however the ability to access chunks would be quite handy. If the idea in the future is to handled them both using the same mechanism, there should be a way of determining which ones are accessable and which are not.

But for now... what does the chunks section depend on in order to be listed for a restricted user?

Quote from: Robsta at Nov 21, 2005, 12:12 PM

Quote from: rthrash at Nov 21, 2005, 11:51 AM

No one said there’s forever going to be a distinction between the two...

I think it’s good to be able to prevent restricted users from accessing snippets, however the ability to access chunks would be quite handy. If the idea in the future is to handled them both using the same mechanism, there should be a way of determining which ones are accessable and which are not.

But for now... what does the chunks section depend on in order to be listed for a restricted user?

Has this question been answered? I’d like to make chunks accessible to certain user roles.

That won’t work with 0.9.2.1 and I can certainly not tell you when it will... the thing I can tell you is you can at least lock the chunk for the administrator only (just check the "lock this chunk" box before saving).

Quote from: aherrera at Jun 21, 2006, 05:12 PM

Has this question been answered? I’d like to make chunks accessible to certain user roles.

No not yet. And I’ve not had the chance to work out what permissions setting the chunks section does depend on.

Bummer. Guess that means in order to give a client access to chunks (for PayPal buy now buttons in this particular case) I have to give them Administrator privileges, which makes me nervous. It just *seems* (and by all means, correct me if I’m wrong) that in role managment, chunks should be editable/accessible instead of snippets. Snippets are generally more than basic HTML, which seems more dangerous for non-technical folks such as clients. Everything else in the Manage Resources area is configurable in the user roles...

Can’t wait to see an update! Thanks for the reply...

I did create a PayPal snippet ages ago. Very basic, but it worked apparently... I never got to use it, but I know others did.

It’s in the Eto site library.