Revolution Permissions at Bob's Guides

I don’t know if it’s accurate and I don’t know whether it will make sense to anyone, but it’s there.

http://bobsguides.com/revolution-permissions.html

Hopefully, people who know more than I do will look it over and help me correct any inaccuracies.

Suggestions welcome.

Bob

whoaaa!
that’s a long detail page of the permission ONLY tutorial.
good tutorial, bob! as always.
will read it in detail soon.

Bob can I just say your the best. Just had a quick scan read and already things are begining to make a bit more sense for me. Will now need to find time to read in detail and put some of it to action and see what happens.

Thanks.

You’re going to save me of lot of times with this tutorial.

Kudos!

Thanks Bob, this will be a great help!

Hi Bob, Thanks for the guide!! I am trying the "SubAdmin Users" example, which works fine except I don’t see the web context in the site tree (Yes I added web context as described in the guide).

On the Permissions tab, delete any Permissions you don’t want your SubAdmins to have. Removing the element_tree and file_tree Permissions will prevent them from seeing those tabs in the left panel of the Manager. Removing the access_permissions Permission will keep them from changing their own security level and those of other Users.

element_tree and file_tree is missing in my Administrator Access Policy from the beginning (I am pretty sure that I didn’t delete any administrator permissions). Can somebody confirm it is missing?
Did you use Revolution Beta 5 for the guide?

My goal at the moment is to setup a protected "Resource Group" to hide from anonymous user, as you described in the last example, but I can’t get it to work. I am trying to login with [[!Login]] in the specific context, but always get 404. I guess at least the protection is working.
Did somebody get this last example to work with beta5?

If your only hide a "Resource Group" from anonymous users, or in other words if only the Resource Group Access is used, would the Context Access stay empty?

Thanks
eni

Quote from: eerne at Jan 26, 2010, 03:03 AM

element_tree and file_tree is missing in my Administrator Access Policy from the beginning (I am pretty sure that I didn’t delete any administrator permissions). Can somebody confirm it is missing?
Did you use Revolution Beta 5 for the guide?

These permissions are available in SVN only, and will be available in the RC1 release.

I followed the tutorial for basic group and users, that was really helpul.

Now, i would like to emulate 2 evolution behaviours and i still can’t figure how to do it:

• Allow anonymous user to use ajax with the web context.
• Redirect users to unauthorized page instead of 404 page. I really don’t know how to do this one.

Any help will be greatly appreciated

Quote from: lossendae at Jan 26, 2010, 08:57 AM

* Allow anonymous user to use ajax with the web context.

It doesn’t matter what kind of request/response a Resource returns, they are all protected by access policies in the same way. I don’t understand what you mean here; just don’t protect the Resources that service your AJAX requests.

Quote from: lossendae at Jan 26, 2010, 08:57 AM

* Redirect users to unauthorized page instead of 404 page. I really don’t know how to do this one.

By default, if a user does not have permission to load a Resource from a Resource Group, it will appear to that user as if the data does not even exist. This is why it is a error_page/404. You can have it use the unauthorized_page/401 response by giving anonymous users only the load permission on that Resource Group. IOW, just create a simple Policy with one permission called load, and assign it to anonymous users in the Resource Group for the web (or any front-end) Context. This will allow them to see that the Resource exists, but still tell the user that they are not authorized to access it. Without this, even Snippet/Plugin code will act as if those Resources don’t exist when executed by a user without the load permission on them.

I’ve finally succeed!

Thanks for the pointers.