Hi all,
I want to create a module that extends the current user management system of modx. I want to be able to give a user the right to view a page, while the rest of the user group he is in is not allowed. Since there propably will be many users with many exceptions, creating a new user group for every user is not an option.
I have been thinking, and my strategy will be to add a new table to the DB. This table will have 2 columns, first will be userid and second will be the docid of the exception. When the docid of the exception is negative, the user is not allowed to see the doc, when it is positive he is allowed to see the doc. With this table and the already existing tables (modx_documents_groups, modx_web_groups and modx_webgroups_acces) I can generate an acces control list when loading the page. How do you guys think about this implementation?
I was also wondering whether someone can explain to me how the user management works in the code. I understand the basics on how it works, but can’t find any information how it is implemented. This is how far I understand the user management:
Modx uses two types of users: Manager users and Web users. Manager users are used to acces the manager, while Web users have acces to the website. You can assign rights to a resource by adding it to a resource group. Then you can link a resource group to a user group. The user group contains users, and those users can see that page. Is this correct or do I miss something?
Thanks in advance
