Permissions weirdness

Hi All

I´m a long time ModX user but this one I can´t crack on my own. Hope someone can help.

I´m currently working on setting up permissions in our ModX setup. Our setup will contain multiple contexts. One for each of our clients. Then we want to setup an Editor account for each client so they can edit their site/context, but not see other clients contexts.

I have created a user and usergroup for a specific client with access to mgr and the context in question.
Screenshot:

http://cirqlar.dk/temp/modx-problem-1.png

These settings work. The Editor can log into the mgr and edit resources.

But notice that I´ve have the web context added to "Context Access" for the Usergroup. If I remove this entry then the Editor user can log into the mgr and see the "lg.modx.4mobile.dk" context. But if I try to edit a resource as Editor user then I get this:

Screenshot:

http://cirqlar.dk/temp/modx-problem-2.png

Editing a document gives this:

Screenshot:
http://cirqlar.dk/temp/modx-problem-3.png

What am I missing here? According to the documentation it should be possible to "limit" users to only edit a specific context in the manager.

Modx Version:
MODX Revolution 2.2.0-pl2 (traditional)

Regards

[ed. note: stereomono last edited this post 12 years, 1 month ago.]

Are the resources in the third context protected in any way (i.e. in a Resource Group that's connected to another User Group?


---------------------------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using . . . PLEASE!
MODX info for everyone: http://bobsguides.com/modx.html

No, according to the screenshots I dont have any resourcegroups at all. (According to Shaun´s video on modx permissions it shouldn´t be necessary to have resourcegroups in what Im trying to achieve).

Screenshot:
http://www.cirqlar.dk/temp/modx4.png

and for a single resource in the context:
Screenshot
http://www.cirqlar.dk/temp/modx5.png

We are using MODX Revolution 2.2.0-pl2 (traditional)

Try changing the 'mgr' context policy to 'Administrator' and see if that fixes it.

Be sure to flush both permissions and sessions after making any changes.



---------------------------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using . . . PLEASE!
MODX info for everyone: http://bobsguides.com/modx.html

I tried changing the context policy for mgr to Administrator as suggested. That didn´t crack it.

But instead I tried this:
Added the 'web' context to the usergroup with access policy 'Load Only' and role 'Member - 9999'.

I can now create/open/edit/save resources in the 'third' context when logged in as Client account.
The 'web' context does not show in the Resource Tree (which is fine).

Client account has Content Editor policy for context mgr and Administrator policy for the 'third' context.

I don´t know if this is correct behaviour, context web should be irrelevant for accessing a third context.

But it seems to work just fine now.

It doesn't make any sense to me either. It kind of sounds like a bug.

FYI, if you wanted the web resources to be visible but not editable, you could set the policy to Load, List, and View.