deny edit rights in manager but allow to go for deeper level

Hi. I am using modx in several projects and want to use it for a further one which is in a curent development. the scenario is to get something like advertisement and service/solution website, where customers would get presentation, and solutions for their marketing by location.

for example i have domain mycity.com and want to have categories like butiques, relax, market, travel.. where in each categrory there are few many advertisers like in content tree below

mycity.com
+ travel
---+ agency 1
---+ agency 2
+ relax
---+ spas
-----+ spa1
-----+ spa2
---+ cinema
-----+ cinema 1
-----+ cinema 2


that means i want my advertisers to be able to access and edit their content on the specific tree level, abut i dont want to allow them to edit parent pages

my question is how to set user rights, i didnt manage this yet have stuck on the rights to enter unalowed level..

please, help would be appreciated..

Peter

1. Put all the resources you want to protect (and their ancestors) in a resource group and connect it to the Administrator User Group with a Resource Group Access ACL entry (Context: mgr, Policy:Resource, Minimum Role: Super User). That will completely hide them.

2. Put the advertisers in an Advertiser user group.
Put the ancestors of your protected resources in resource group and connect it to the Advertiser group with a Resource Group Access ACL entry (Context: mgr, Policy:Load, List, and View, Minium Role: Advertiser). That will let them see but not edit the ancestors.

3. Put the protected resources in resource group and connect it to the Advertiser group with a Resource Group Access ACL entry (Context: mgr, Policy:Resource, Minium Role: Advertiser). That will let them see but not edit the ancestors.

4. Add yourself to the Advertiser group with a role of Super User -- otherwise, you'll be hiding the protected resources from yourself.

Step 2 is necessary so that the Advertisers can see the protected resources in the tree. Otherwise, they would be hidden because their parents are hidden.

Thanks Bob, i see. the ACL functionality is a final thing to make a step toward Revolution.. I been still using evo.. need to go trough documentation.. thank you a lot

Lots of ACL info at the site in my sig.

---------------------------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using . . . PLEASE!
MODx info for everyone: http://bobsguides.com/MODx.html

sorry, my fault with modx version. was a late night here at time of posting.. and thank you for a link.