We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 28508
    • 73 Posts
    Hi guys,

    I’ve a little question concerning policy-rights (again).
    I’m quite sure it’s rather easy to solve, but I’ve no idea how... maybe I just worked too long on it.

    I’ve assigned a user group to a access policiy where they can:

    edit_chunk
    new_chunk
    save_chunk and
    view_chunk,

    the only thing they’re not allowed to is delete_chunk.

    When user of this group saves a chunk, the chunk is actually saved, but a window shows up with "permission denied".
    So everything works, except of that message that shows up.
    Some of the chunks are in categories, but that doesn’t seem to play a role in my opinion.

    I’ve no clue if this could be related to any other rights, maybe the users do not have the permission to load a page after
    saving, but I didn’t find any rights that could effect that.

    Does anyone have a small hint for me?

    Thank you very much,

    stetus

    Edit: I use MODx 2.0.6-pl (advanced)
      • 33968
      • 863 Posts
      I've come across the exact same issue in Revo 2.1.3-pl, exactly the same permissions setup.

      Does anyone have any ideas about other permissions that might affect saving a chunk? It does not affect saving, but might be related to refreshing the resource/elements tree after the save event.

      If not, I'll file this as a bug... have spent ages checking and unchecking different permissions but can't resolve it.
        • 3749
        • 24,544 Posts
        There are one or more permissions related to the cache. Maybe the user doesn't have permission to clear the cache. That would explain why the save is successful.
          Did I help you? Buy me a beer
          Get my Book: MODX:The Official Guide
          MODX info for everyone: http://bobsguides.com/modx.html
          My MODX Extras
          Bob's Guides is now hosted at A2 MODX Hosting
          • 33968
          • 863 Posts
          Hi Bob, good thinking - but empty_cache is already enabled. I'm about to back up the permissions and go through and re-check every permission until I find the culprit, will report back!
            • 19328
            • 433 Posts
            For people who experience the same problem, we solved it by giving permissions to view/edit/delete propertysets. [ed. note: michelle84 last edited this post 14 years ago.]