Resource Access - What am I Doing Wrong?

Hey all, I’ve been trying to get Manager access to Resources working, and I’m stumped! Basically, I have two groups: Administrators and Content Editors. I also have 3 resource groups:

Content - This includes all of my article pages.
News - These resources are for the blog/news area.
Special content - Includes resources like search, site maps, pretty much anything that an editor user would never need to edit.

What I’d like to do is allow access to the resources in the Special Content resource group only to Administrators. I followed Bob’s guide to permissions (which is very helpful), but I’m having some trouble with resource visibility now. Here’s what I’ve done:

1. Created a "Content Editor" role (Authority level of 20).
2. Created a "Content Editor" group.
3. Added a user to the new group.
4. Duplicated the default Administrator policy and renamed it "Content Editor" (no permissions have been changed yet).
5. Added the following entries to the Context Access grid:

Context: mgr
Minimum Role: Content Editor
Access Policy: Content Editor

Context: web
Minimum Role: Content Editor
Access Policy: Content Editor

At this point I can log into the Manager with the user in the Content Editor group and see all of the resources in the tree.

6. Created my three resource groups: "content", "news", "special content" and added a few resources to each.
7. Updated the Administrator user group and added the following to the Resource Group Access grid:

Resource Group: Special Content
Minimum Role: Super User
Access Policy: Resource
Context: mgr

Now the Administrator user can view all of the resources, but there are no resources being displayed for the user in the Content Editor group - the tree is completely empty! Shouldn’t all resources be visible except "Special Content"?

So, I edited the Content Editor group and added an entry to the Resource Group Access grid:

Resource Group: Content
Minimum Role: Content Editor
Access Policy: Resource
Context: mgr

And that caused all resources to disappear for Administrators (still empty for Content Editors)!

I know I must be missing some part of the puzzle here, I just don’t know what that might be! Any help would be greatly appreciated!

Ok, after updating to the pl2 release of MODx 2.0.4, it seems to be working now. Administrators can see all resources, while Content Editors can see all resources not in the "Special Content" resource group. I was pulling my hair out trying to figure out what I was doing wrong!

There may have been a bugfix on this, but for future reference, you might have needed to flush permissions and sessions and clear the cache (and maybe the browser cache as well) after making changes.

Quote from: BobRay at Oct 16, 2010, 12:34 AM

There may have been a bugfix on this, but for future reference, you might have needed to flush permissions and sessions and clear the cache (and maybe the browser cache as well) after making changes.

Yeah, I left that part out of my above post - I flushed permissions and sessions whenever I made a change to anything under the Security | Access Controls section. It’s probably a good habit to get into.

Great guide by the way! It’s a good jumpstart for those of us coming from Evo and trying to learn the new Revo way of doing things.

Thanks for the kind words.