Hide Access Controls and Resource Groups from Security Menu dropdown

I created a new user that only needs to maintain content (Resources) and maintain web users.

• I’ve created a new Access Policy = Content Mgr and stripped out some permissions. However there doesn’t seem much granularity on the Security dropdown. If I remove "access_permissions" it deletes all options but I want to delete only Access Controls and Resource groups.
• Also if I allow Content Mgr to maintain users what’s to stop Content Mgr from adding a user and adding it to the Adminstrator group hence creating a back door into being able to administer everything?

Thanks

Mark

Create a custom permission (let’s call it access_hidden). Important: Before you do anything else, give that permission to the admin Super User (and anyone else who should see those items) by adding it to their policy (or policy template if you have 2.0.5+).

Now, go to Manager -> Actions and expand the tree on the right. Right click on the ones you want to hide, choose update, and change the required permission to:


(No spaces in the line).

Clear Cache
Flush Permissions
Flush Sessions

The items should be hidden from anyone without the access_hidden permission.

Yikes, thanks Bob

I’ve spent a while looking but I can’t even get to 1st base. Where do I create a custom permission? I’m now on 2.05.

Thanks

Ok half a day later I’ve found the function and it all works great, thanks Bob.

Some of the terminology in Revolution is a bit cryptic and sometimes you need to right click when it’s not obvious. I had a girlfriend like this once. Couldn’t understand what she was on about and never sure where to touch to get a reaction.

Any thoughts on my second point appreciated

• Also if I allow Content Mgr to maintain users what’s to stop Content Mgr from adding a user and adding it to the Adminstrator group hence creating a back door into being able to administer everything?

Quote from: sparkyhd at Dec 09, 2010, 11:15 AM

Some of the terminology in Revolution is a bit cryptic and sometimes you need to right click when it’s not obvious. I had a girlfriend like this once.

I once had a girlfriend who use to change color when you right-clicked on her.

Also if I allow Content Mgr to maintain users what’s to stop Content Mgr from adding a user and adding it to the Adminstrator group hence creating a back door into being able to administer everything?

I’m not sure about this, but I think the user would have to have access_controls permission to put someone in a user group, but not just to simply manage users.