Permissions Question

I seem to have lost my grip on Revolution permissions.

I was working through the Member Pages tutorial and couldn’t get it to work. Either the restricted users can see all documents in the tree, or none.

The crux of the matter is this question: Is there no way to give users access to a small number of documents (and hiding the others in the tree) without putting every document on the site into a resource group?

When users in a user group have Resource Group Access ACL entries giving them access to to the resource group containing just their docs in the web and mgr contexts with the resource policy, they can’t log in to the Manager without a Context Access ACL for mgr. That makes sense.

With that, mgr context access, however, they can’t see any resources unless they also have a Context Access ACL for the web context. If it gives them the Load only policy, they see no docs in the tree. If it’s Load, List, and View, they see all of them.

Using tree_root_id is a partial solution, I guess, but it’s a pain to set the user setting for every user, especially if it will be different for each user, as in the case of individual member pages, and you may not know its value when the user is created.

Am I missing something?

Nudge . . .

I havea similar issue with resource group and Load Only permission.

*bookmark* and re-nudge