Access Permissions

I’m using evolution 1.0.4. and encountered a problem I’ve never had before. All manager users, except the ones with the default Administrator role, are unable to set access permissions for resources. The whole tab "Access Permission" won’t show. I don’t know if it’s a bug or if I’m doing something wrong.

Example... I have a new Role called "Customer" and use the following Role settings:

• Disabled Manager Manager Plugin to make sure this wasn’t interfering.
• Role settings:
  [list]
  [li]Content management: Every option - yes
• User management: Create new users - yes (shouldn’t have influence I think)
• User management: Edit users - yes (shouldn’t have influence I think)
• User management: Save users - yes (shouldn’t have influence I think)
• User management: Delete users - yes (shouldn’t have influence I think)
• Web user management: Create new web users - yes (shouldn’t have influence I think)
• Web user management: Edit web users - yes (shouldn’t have influence I think)
• Web user management: Save web users - yes (shouldn’t have influence I think)
• Web user management: Delete web users - yes (shouldn’t have influence I think)
• Permissions management: Access permissions - yes
• Permissions management: Web access permissions - yes

[/li]
[/list]

When I create a new manager user and attach this role to it, this new user won’t see the Access Permissions tab when (s)he’s logged into the manager and creates or modifies a page.

Can anybody tell me what I’m doing wrong here?

Very interesting. My user (using your details) only got that tab once she was assigned to a manager user group.

Ok, examining the code, what is happening is that a check is made if the user has access to the document groups being listed; if she isn’t a member of a user group connected to the document group it won’t get displayed in the list.

If she isn’t assigned to any groups, or at least not to any groups connected to any document groups, then none of the document groups will be listed. If there’s nothing in the list, then the tab doesn’t get displayed.

I’m not sure if I’m following you here. Just to make sure... the problem I’m talking about occurs also on resources that are accessible by all of the manager users.

Yes. The whole point is that the code for displaying the list first checks that the user has access to each document group in the list. If she doesn’t, the group doesn’t go on the list.

Then, the code checks to see if there are any groups in the list. In the case where a user is not assigned to any user groups connected to documents groups, there are no groups in the list, and when there are no groups in the list the code doesn’t bother to display the list or the tab.

As soon as you assign the user to a user group(s) that is connected to a document group(s), then the tab with the list of all such document groups will be displayed.

I understand it now, although it doesn’t make much sense to me to be honest. You guys intended it to work like the way it does now?

I would presume so; where’s the sense in a user assigning a resource to a group he doesn’t have permission to access? He does that, and suddenly the resource disappears from his Tree, and he panics.

I’m starting to feel kinda dumb. I just don’t understand the mechanism used.

I have a Manager User which should be able to set Access Permissions according to his Role. I don’t see why I should connect a Manager User to any of the Resource Groups to be able to make certain resources not Publicly available on the website (front-end). The administrator is able to do this, but other Manager users with a different role aren’t. I only have set Web User/Resource Group links.

I do understand that when you want to block access to certain resources in the manager, you need to assign users to certain groups, but I’m not talking about this. I’m talking about managing who has access to which resources in the front-end.

I get the following message:

Because the Web User Groups and Manager User Groups conflict for your Role, this Resource will be public. Contact a site administrator for further help.