I have set up a new Role and a new Manager User for that role called
Editor. In the settings for the
Editor role, I have made sure Permissions Management options are not selected.
I have also set up Access Permissions to disallow the
Editor group from editing certain pages and this works beautifully. However, I have also given the
Editor role the ability to edit/create new users, and this is where the problem arises. The user can go in and edit their own Access Permissions!
I have double checked/tested everything and it looks like a bug (maybe limited to MODx v1.0.0 - I didn’t use this feature on earlier versions). Has anyone else had the same problem?
I really need to get this solved ASAP and am willing to try hacking the core files - but any hints on which documents to look at (including line No.s if possible) would be much appreciated.
