Revolution 2.0.0 pl Permission Confusion

Thanks for contributing.

Hi!

i’m still confused about permissions.

I try to use the login snippet for revolution.

- first i created a usergroup with a user of role "Member" (9999)
- then i created a resourcegroup "protected" and added all resources except my login-page
- for my new usergroup i added a resource group access (group = "protected", role = "member", policy = "Load only", context = "web")
- "load only" is with the only permission "load"

now i thought the user can login and see the protected resource, but i doesn’t work. the page isn’t found...

does anyone know what i’m doing wrong?

All Visitors are automatically "members" with an authority number of 9999 (whether they log in or not) so you should probably give your actual users another authority level, otherwise, the resources aren’t really protected (and don’t call your user group "Members").

Thanks for that.

But it still doesn’t work

- now i have a role with level 100 called "teacher"
- the "protected"-Resource group with my resource in it
- a user with the new role "teacher"
- the user group of that user ("schooluser") has a resource group access (group = "protected", role = "teacher - 100", policy = "Load only", context = "web")

and now, the protected resource can still be loaded if i’m not logged in. The resource belongs to the group "protected" so it shouldn’t be seen of not logged-in users...

did i forget something?

Did you clear the cache and flush both permissions and sessions?

Did you try it from another browser where you’re not logged in as a Manager?

Yes, i cleared cache and flushed all.
And i use another browser...

Quote from: jgulledge at Jul 31, 2010, 09:52 PM

I created a script that will create 5 different Access Policies and give them the appropriate permissions. It runs out side of the manager and I just put everything in an array so you can move them around if you wish. To me they are very helpful to separate the permissions and then it makes it much easier to fine tune them.
........

Beautiful. Thanks much for this detailed ACL script. For me, your code makes it perfectly clear what’s going on with modx ACL permissions.

I also like the idea of your diagram/illustration above to explain. Much clearer than a text explanation. Thanks for that too. Great contributions.

Quote from: speyburn at Aug 04, 2010, 06:16 AM

Yes, i cleared cache and flushed all.
And i use another browser...

Did you get rid of the "Members" group and policy before flushing everything? Don’t forget to clear your browser cache, too. I don’t see anything you’re dong wrong, but maybe I’m missing something.