I’m having a hard time understanding how the user security works in MODx. I have been a MODx user for about a year, and I still can’t wrap my head around all the different parts of the security in MODx.
What are Roles?
I want something simple as four groups: Administrators, WebAdmins, Content Editors and Contributors.
Then assign different settings for these users. Why is there a need to add group and a role within that group?
As said, i want four groups of users:
Administrators
Administrators have full access to the entire site
WebAdmins
WebAdmins have full access to resources, and have some settings they can change for the site (Security, reports) and have access to the Elements tab.
Content Editors
Content Editors only have access to Resources and have the ability to add, edit, delete and publish resources.
Contributors
Contributors have same access as editors except the ability to delete and publish resources.
How can this be done?
-
☆ A M B ☆
- 24,524 Posts
Which version of MODx? Evo is quite different from Revo.
-
☆ A M B ☆
- 24,524 Posts
In Revolution, Roles are necessary to give users in the same group different rights.
It sounds like you need one role (and one Context Access ACL entry) for each group. From your description, it doesn't sound like you need any Resource Group Access ACL entries unless there are specific resources you want to hide or restrict access for specific groups.
It looks like you can just create one policy for each group, all based on the Administrator template. Then create one Context Access ACL entry for each group with a context of 'mgr', their policy, and their role as the minimum role.
For each role, use an authority number greater than 1 and give the more powerful users lower numbers.
You could just put them all in the Administrator group, but I would use a separate group for each of them in case you want to use Form Customization rules for them later on.
[ed. note: BobRay last edited this post 14 years, 10 months ago.]
