Access Control

Hi, All!
http://svn.modxcms.com/docs/display/revolution20/Creating+a+Blog+in+MODx+Revolution#CreatingaBloginMODxRevolution-AddingaModeratorGroup

All done as written in the instructions. after (Security -> Flush Sessions) to authenticate a user "ant". In response to display the following error: "Permission denied!
You do not have the proper access policy permissions to view this page. If you feel this is in error, please contact your systems administrator. "

As the administrator looked (Security -> Access Controls) Group "Moderators" was not in the list. Again, add the group "moderators" in response to error: "There is already a user group with that name."

How to fix this problem?

Sys. info:
OS: Linux 2.6
Apache: 2.0.63
MODx version: MODx Revolution 2.0.0-pl
PHP Version 5.2.5
MySQL Version: 5.0.26

Best regards, Anton

If I’m understanding you, you don’t have to create the group again, you just have to create an ACL entry for them.

Be careful, moderators is not the same as Moderators.

Hi, I have almost the same problem

New user ’writer’ and old ’admin’ have acceess to ’group for writers’ - there’s one document ’test’ in it (it’s in the root with parent 0).

When I login as ’writer’ based on administrators roles I don’t see document tree at all, while elements and files are displayed.

if I acceess the ’test’ anager edit page directly by url it’s opened for editing http://example.com/manager/?a=30&id=50

Look’s like there’s no resource tree view access rights - but that’s strange because I duplicated Administrator’s access policy

How’s that?

Did you create a Context Access ACL entry for the usergroup for the ’web’ context with a ’resource’ policy?

The ’web’ context is protected because of the admin’s ACL entry for it, so you have to give the users rights to it before they can see it in the Manager.

I actually created mgr context access - didn’t think that web is needed.

now tree is showing but with all documents - may be that’s my messing with testing rights

This will help a lot!
http://vimeo.com/13856994

video is nice but i guess revo can’t give me what i want fix me if i’m wrong

I want not to hide few docs from my ’writer’ to allow him to edit only docs marked ’for writer’

In video we have
- allow edit all
- disallow show|edit blog

I need
- disallow ’writer’ edit all
- allow ’writer’ edit ’for writer’ resource group documents
- allow view on the website all visitors (even anonymous)



is that possible?

I tried the following way

1. created role with read only access to resources
2. for ’writer group’ created context access to mgr and web with ’read only’ access policy
3. for ’writer group’ created resource group access ’for writer’ with ’administrator’ access policy for web/mgr
4. flushed everything

but still when I login as writer I have read only access to my ’test’ page which is ’for writer’

Does your "writer" have a mgr Context Access ACL entry with a policy of Administrator (or another that has the right to edit and save resources)?

What you’re trying to do is definitely possible in Revolution or Evolution.

Quote from: jonimant at Aug 08, 2010, 04:37 PM

As the administrator looked (Security -> Access Controls) Group "Moderators" was not in the list. Again, add the group "moderators" in response to error: "There is already a user group with that name."

Not explained to me why is not displayed in the group of users group "Moderators". All I did the instructions "http://rtfm.modx.com/display/revolution20/Making+Member-Only+Pages".
After the "Flush permissions" Group "Moderators" does not appear in the lists of "User Group", the repeated addition of "Moderators" in response to error: "There is already a user group with that name."