How to stop unautharised access to user pages

Got a newbie question:

I understand that the parameter &liHomeId=`43` takes the successful user to a document with the id of 43.

But how do I stop that same document from being accessible to the general public? If they manually type in the id in the address bar the document is still accessible.

Thanks in advance!!!

wow what a helpful forum. LOL 48 views & no replies

Hey Global,

I am a newbie as well, but look up Weblogin, basically you would use something like [!WebLogin? &loginhomeid=`21` &logouthomeid=`1`!] and this would let your the people with web permissions to login and see only the pages that you have set to viewable.

Sorry that’s probably not much help, but its a point in the right direction.

http://svn.modxcms.com/docs/display/MODx096/Home

Thanks a lot pagalo that did help!

Quote from: global_1981 at Apr 08, 2009, 10:29 PM

wow what a helpful forum. LOL 48 views & no replies

This isn’t a chatroom. It might take more than one day for someone to be able to respond.

You can control who can see which pages through web user groups and document groups, set via Security > Web Permissions. For your requirement, you create a web user group (e.g. ’members’) and a document group (e.g. ’memberpages’) and you link ’members’ to ’memberpages’. The relevant web users are attached to the group in the ’web access permissions’ part of their individual settings, and the documents are given the relevant access permissions in the checkboxes at the bottom of their edit screen.
The documentation Breezer has pointed to also indicates you need to set "use access permissions" in the "User" part of Tools > Configuration (this is probably the default). You could also set up a custom "access denied" page in the "Site" part of configuration.
Back to eating my Easter egg now...
KP

See this page for more on MODx permissions: http://bobsguides.com/permissions.html