I am using a brand-new 0.95 and have no idea what PHP and MySQL my host is using. Sorry.
When a delegate (an Editor with content page create and edit rights) edits a page that he can see, he can change the Document Group that a document belongs to, to a Document Group that that Editor has no rights to access. Upon saving, the document is saved in that Document Group, and promptly disappears from the left-hand listing panel. The right hand panel attempts to load the summary page, but cannot, and an error message pops up. When OK is clicked, the right hand panel attempts and fails to load it again, and this loop continues, possibly indefinitely.
Quickly clicking on anther file name in the left hand panel while the screen is refreshing breaks the loop. Minor bug, over to you. [Where do I post reports of possible bugs?]
The real reason I am writing is something more fundamental:
From a user management point of view, it shouldn’t be possible to change a document’s assigned Document Group to a Document Group for which a user has no rights.
Ideally, a user who is restricted to certain Document Groups should not be able to assign documents to any Group other than the ones he or she has rights to - and this includes Public.
A scenario for you, using your analogy in the documentation.
http://modxcms.com/manager-roles-groups.html
You have Marketing, who prepare outward-facing material that deals with the public’s perception of the company and its products. You have, amongst others, Support, who provide information that is partly for the public and partly for the employees only - Project Management stuff.
It isn’t sensible to let documents meant for internal consumption to be seen by the public. Nor is it sensible to let the staff in Support publish material direct to the clients - Marketing departments want to control the client:company interface very tightly to make sure the right impression is being made. Nor will Marketing departments think it sensible to make possible clients register for a password to see marketing guff. Almost everyone will click away. The public stuff has to be controlled as much as the private stuff, if not more so, but perversely has to visible without being behind a password barrier.
So far so normal.
But MODx doesn’t seem to work like this, or at least I can’t find out how to make it work like this.
How does MODx stop documents prepared by staff normally restricted to, say, Salaries Section, Personnel Department, Document Group, from being assigned to All Document Groups (Public)?
Scary.
Yours
Nic
MODX Staff