[Snippet] Two manager authentication snippets

Quote from: aNoble at Aug 24, 2005, 01:22 PM

Quote from: sottwell at Aug 24, 2005, 01:13 PM

Or not...

http://www.videolan.org/pwntcha/

More reason to get it out of the core, right I thougt the image idea was pretty good though.

In general, for small sites it’s probably fine. The serious spammers usually only attack major sites. However, it is also patented (by HP).

http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=HITOFF&d=PALL&p=1&u=/netahtml/srchnum.htm&r=1&f=G&l=50&s1=’6195698’.WKU.&OS=PN/6195698&RS=PN/6195698

I’ve just found this thread. I was looking to do the same thing, but thought the functionality might already be in the system for this... my post is here.

I might assume that removing the ability to log into the manager (user manager option), but allowing the QuickEdit module run permissions for the user’s group, this could be accomplished.

You mentioned in a thread linking to this (here) that it might be in the next release... ergo, this current release?

Hello Robsta,

I’m sorry it’s taken me so long to get back to you. I read your first post a while back and meant to look into it but it slipped my mind for a while.

I’m not sure of any way to allow a person to use QuickEdit without allowing them to use the manager at this point. You could change the QuickEdit toolbar so that they cannot see the Manager login, and if they don’t know the url to get to the manager they’d probably never find it. But if you really want to prevent people form using the manager (not just discourage) that wouldn’t work too well.

The problem is that the QuickEdit editor window is actually in the manager, you just don’t know it because there are no frames. So if you revoke their access to the manager you revoke their access to QuickEdit.

If there is a way to do this it would have to be done with Plugins I’d think but I’m not exactly sure how. The trick would be allowing them to access the QuickEdit module and nothing else. You might want to ask Raymond (xwisdom), he’s the plugin expert.

It’s a good idea in theory.... Thanks for the information.

I updated these snippets just a bit. There was an error in the form action attribute that was causing problems with some urls and I fixed some code that was creating error notices.

I updated the original file attachment so you can download it from there.

More fixes to the ManagerLogin snippet. It should be 0.9.1 ready now. I made it work with login_startup and applied some fixes to the plugin calls and some better use of new API fetures.

I’ve updated the attachments on the original post.

will there be an issue with enabling all the SEF option in MODx? I assume there is a bugs in MODx, which cause the login from a page inside a subfolder to be directed on the wrong document, will it be fixed in this new snippet version?

Thanks


Regards,
Wendy Novianto

Should work fine with friendly urls and aliases I havn’t tried it with friendly alias paths, I don’t see why it wouldn’t work though. If you are having problems please let me know what’s happening and how you have things set up.

Ok, I will do, but I’m not sure when I can test it up. If somebody has the opportunity to test this pupy first before me, please do so and reply to this post on how things happen.

Thanks


Regards,
Wendy Novianto

Quote from: aNoble at Dec 06, 2005, 12:21 AM

Should work fine with friendly urls and aliases I havn’t tried it with friendly alias paths, I don’t see why it wouldn’t work though.

Works great with friendly urls but no go with alias paths. I think this has to do with the same bug that’s been reported before... http://modxcms.com/bugs/task/109

I just noticed Jason’s fix and tried it but it doesn’t seem to correct the bug for manager users, only web users.