Manager web context permissions

I have a client complaining that when they log into the web context of their website as the administrator, they don’t have any access to any of the other groups documents. Which is fine as default behavior.
I was wondering if it was a good idea to add all the web context permissions/groups etc. to the default administrator account so they could see all the pages - or if it was setup like this by design....

-thanks
-sean

I’m not sure what you’re saying. If the users are logged into the Manager, they are in the mgr context, not the web context. If they’re logged into the web context in the front end, in what sense are the other resource group resources hidden from them?

Either way, no resource group’s resources are ever hidden from anyone by default. Resources are only hidden when you create a Resource Group Access ACL entry and there are none of those in the default install.

If you’re saying that connecting a resource group with a user group hides those resources form the admin, you’re correct. One solution is to just add the Admin to every new user group with a role of Super User.

If you’re saying that connecting a resource group with a user group hides those resources form the admin, you’re correct. One solution is to just add the Admin to every new user group with a role of Super User.

Yes, that’s what I am saying & it is working exactly as it is supposed to - my question was really wondering if there was any reason ~not~ to add the super user to every group.... [sounds like ’apparently not’]

-thanks
-sean

I consider it a good practice -- it’s the first thing I do when creating a new user group. The alternative is to put all the users in the Administrator group with different roles (that way the admin Super User is automatically in the group), but that can interfere with Form Customization and I think it’s more confusing for users.


Remember that when you add the admin to a group, you may also have to create a separate Resource Group Access ACL entry for the admin with a Context of mgr, a Minimum Role of Super User, and the Resource Policy. This is only necessary if you have a modified "resource" policy for the other users. In that case, the admin would only have the permissions with those resources that the other users are granted.