Access Policy: Can anybody help in this case?

I added in Revo 2.1. a new usergroup called "editor2" and gave them a role "editor2" (Authority: 20). I added the Access-Policy editor2 (containing: element_tree, tree_show_element_ids, view_element and some others), nevertheless all the chunks, templates, snippets and plugins are not visible for users of the usergroup editor2.

Does anybody know what I did wrong?

I am going to make certains chunks just visible to a certain group of editors...

Letti

I found the solution: I forgot to add "view_chunk". Now it works. Unfortunately there appears an error-message right after saving a chunk: "Permission denied!" (while saving the chunk is nevertheless successful).

Does anybody know what could be the reason for this error-message on the screen right after saving a chunk ? (error log is empty, edit_chunk and save_chunk are activated)

Letti

The permissions have to be right in both their Resource Group Access policy and their mgr Context Access policy.

Hi Bob,

maybe this is the problem, because the problem appears on saving chunks and not on saving resources. Is there anything to adjust for chunks, too?

Letti

Chunks are elements and resources are not, so look for permissions with the word "element"in them.

I only found 4 permissions containing the word element. These 3 of the 4 permissions are enabled:
element_tree
tree_show_element_ids
view_element

This permission is not enabled:
unlock_element_properties

Nevertheless on saving a chunk I get the error "Permission denied!" after "successful saving"

Do you have any idea which permissions still could miss?

Letti

Do you have an Element Category Access ACL entry that affects the chunks you can’t save?

If not, see if you can save a snippet or template, that will help narrow it down.

In the Context Access ACL entry policy, make sure that save_chunk and database are checked. You might add create_chunk to see if that helps.

In the Element Category Access ACL entry policy (if any) check save, load, list, view, (and maybe copy and create).

Be sure to clear the site cache, flush permissions, and flush all sessions after making any changes.

If none of that works, it sounds like a bug.

Quote from: BobRay at Jul 26, 2011, 05:00 AM

Do you have an Element Category Access ACL entry that affects the chunks you can’t save?

Yes: Category: People, Minimum Role: editors - 20, Access Policy: Elements, Context: mgr.

Quote from: BobRay at Jul 26, 2011, 05:00 AM

If not, see if you can save a snippet or template, that will help narrow it down.

On saving Snippet the same error appears

Quote from: BobRay at Jul 26, 2011, 05:00 AM

In the Context Access ACL entry policy, make sure that save_chunk and database are checked. You might add create_chunk to see if that helps.

It didn´t help. But very interesting: Creating and saving a "new" chunk works fine. Only saving on second time the error appears again. (Saving for the first time is only possible by ctrl+s but not by the button right on the top (which is visible but not clickable).
Quote from: BobRay at Jul 26, 2011, 05:00 AM

In the Element Category Access ACL entry policy (if any) check save, load, list, view, (and maybe copy and create).

In the tab „Element Category Access“ the Access Policy is „Element“ in all added categories. Other options would be „(no policy)“, „Load only“, „Load, list and view“ and „Object“, but there is no possibility for „save, load, list, view (and maybe copy and create)“.

Quote from: BobRay at Jul 26, 2011, 05:00 AM

Be sure to clear the site cache, flush permissions, and flush all sessions after making any changes.

Ok. I did it every time now. Hope these information help what we might have done wrong.

Letti

Does the chunk have any properties on the properties tab)? If so, maybe it’s an issue with saving properties.

Otherwise, I’m pretty much out of ideas.

Good hint!

Although there are no property-sets in this chunk (it is set to default) it however helped to just activate "view_propertyset".

Now there are no error-messages anymore!

Thanks a lot!!

Letti