We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 31902
    • 342 Posts
    Is there a way to make it so that a particular user can only edit one particular page (resource) from the manager area?

    In my case, I have a site that I’m creating for a law firm. There are a group of pages, each belonging to a particular attorney. I want to make it so that a particular attorney can log into the manager area and only have access to add content/edit (maybe even only see) to his or her particular page.

    How is that done in Revo?

    Using Revo 2.0.8
    PHP Version 5.2.10
      • 31902
      • 342 Posts
      Still trying to get this thing squared away here. Here is where I am and hopefully someone can get me the rest of the way.

      1. Created container in the resources called Attorney (it’s an active page, also) and added individual attorney pages into it.
      2. I set up 3 resource groups: one for the admin (full rights, of course), one for a general client admin (with rights to create, delete and maintain all resources...not to anything in the elements or files tab) and a third one called attorneys, with same rights as client admin but which is to only be able to see the attorney container and resources within.
      3. I have users assigned to each.
      4. In Resource Groups, I dragged the items from the right column (web) to the admin group that I want to stop the other groups from seeing. Everything except the attorney container and resources within the attorney container.
      5. In Resource Groups, I dragged the items from the right column (web) to the client admin group that I want to stop the other groups from seeing also. Everything except the attorney container and resources within the attorney container.
      6. In the attorney resource group, I didn’t add anything.
      7. In Access Controls, Administrator, Context Access tab, I left as is. Administrator, Resource Group Access tab, I set to Minimum Role to Super User-0 (web and mgr) and Access Policy of Resource.
      8. In Access Controls, Client Admin, Context Access tab is set to (both mgr and web) Minimum Role of Member-9999 and Access Policy of Client Admin (the access policy I created for them). Resource Group for Client Admin is set to (both mgr and web) to Minimum Role of Member-9999 and Access Policy of Resource.
      9. The attorney one is set exactly like the Client Admin.
      10. Permissions were flushed.

      Overall, the different groups successfully see, or not see, what they are supposed to see, or not see...in the control panel. The problem is that the site does not appear at all, unless you are logged into the control panel, with the exception of the Attorneys page on the site. The public can see that, but the top level navigation bar only shows the Attorneys menu item. Nothing else.

      What am I missing? How do I give the rest of the world the ability to see the site? Thanks in advance.
        • 31902
        • 342 Posts

        Note to admins: Is it possible to move this thread to the Revo General Support section? I think I started this thread in the wrong location. Thank you.
          • 31902
          • 342 Posts
          Quote from: Lucy at Jun 27, 2011, 09:52 AM

          Waizen, I’m feeling a bit timid here since I so recently lead you down the wrong path in your last post,...


          No worries. Really, I don’t see anything you offered as of no value. Whatever anyone offers leads to learning in some way or another. It all adds up.


          Quote from: Lucy at Jun 27, 2011, 09:52 AM
          ...but it sounds like you’ve put restrictions on the ’web’ context that shouldn’t be there for publicly viewed pages.

          These resources helped me in figuring out Revo permissions:

          http://rtfm.modx.com/display/revolution20/Giving+a+User+Manager+Access

          http://vimeo.com/13856994

          Yes, that sounds like the case here, too. I just don’t know where that might have happened and what I should do about it. I’ll check out your resources the minute I can.

          FYI: the method I used was based on the tutorial found on this site by Greg Smart:

          http://www.gregorysmart.com/2011/01/11/revo-limiting-access-to-manager-docs/
            • 31902
            • 342 Posts
            How is it even possible to take away rights for the world to see the site, anyway?
              • 3749
              • 24,544 Posts
              In Security-> Access Controls, update each user group, look on the Resource Group Access tab only and delete any ACL entries that have a context of ’web’ or change ’web’ to ’mgr’.

              A long as all the Resource Group Access ACL entries are for the ’mgr’ context, they won’t affect access in the front end.
                Did I help you? Buy me a beer
                Get my Book: MODX:The Official Guide
                MODX info for everyone: http://bobsguides.com/modx.html
                My MODX Extras
                Bob's Guides is now hosted at A2 MODX Hosting
                • 31902
                • 342 Posts
                Thanks, BobRay... that did the trick.

                Basically, the answer was to do what I did, minus the web context within the Resource Group Access tab of each user group.

                Sweet!