[RESOLVED] Assigning permissions to users [REVO]

Hi all,

I have five users : a, b, c, d, e and two user groups: Administrator and Web Staff

The Administrator user group only contains one user: a
all other users belong to the web staff user group

I’ve also gone ahead and created some roles:

• super user [priority=0]
• supervisor [priority=1]
• officer [priority=2]
• editor [priority=10]

Finally, I have four Access Policies: Administrator, Resources, Officer, Supervisor

While most of my users belong the Web Staff user group, I’d like different Access Policies for some of them.

Here’s what I have in mind:

User: b => Role: Supervisor => Access Policy = Supervisor
User: C => Role: Officer => Access Policy = Officer
User: d,e,f => Role: Editor => Access Policy = Resources

I’m a little confused as to how to get this done. I watched Shaun McCormick’s tutorial video, it helped a great deal, but I still need some help on how to achieve this.

Thanks a lot

This might help:

§ Policies assigned on the Context Access tab should be based on the standard Administrator policy.
§ Policies assigned on the Resource Group Access tab should be based on the standard Resource policy.
§ Policies assigned on the Element Category Access tab should be based on the standard Element policy.

Never edit the standard policies.

So the thing to do is duplicate the standard policy (with a name that reminds you where it came from -- e.g., EditorAdmin, EditorResource) then edit those policies to remove permissions and use them when you create the ACL entries.

Thanks BobRay for the tip, I will put it to use.

Now, let’s say I’m mostly concerned by the Context Access tab.

I have a user, say b, that belongs to the Web staff user group and I want to grant him AdminSupervisor permissions
and another user, say c, who’s also part of the same user group and I want him to have AdminOfficer permissions,

How would I do that?

In other words, do I need to create Access Permissions for each tab (Context, Resources, Element) and if so, how do I solve the dilemma described above?

Thanks again man

In theory, you just add them to the user group with the different roles and set the Context Access ACL entries so that each gets the appropriate policy based on their role.

Remember that users in a group will get all the permissions of other users in the group with higher authority numbers.

Thanks man,

I’ve solved the issue. It took some extra reading and understanding to get it all done.

Cheers