Wayfinder ignoring ACL and displaying all tree items (EDITED)

4 Posts

pretender Reply #1, 14 years, 6 months ago

This may just be a case of my own ignorance, but heres the scoop.

MODX Revo 2.2.0
Wayfinder 2.3.3
getResourceField 1.0.3

Doc tree:
Dashboard (parent but not container)
Item 1
Item 2
Item 3

2.) SidebarNav (parent but not container)
- Item 4
- Item 5
- Item 6

Resource group:
Dispatch (group name)
- Dashboard
- Item 2 (resource to allow access)
- Login (login plugin group)
- Item 4 (from a different branch of tree, child only)

Call:

[[!Wayfinder?
  &startId=`1`
  &level=`1`
  &outerTpl=`wfSFOuter`
  &rowTpl=`wfRow`
  &innerTpl=`wfSFInner`
  &innerRowTpl=`wfInnerRow`
  &hereClass=`current_page_item`
  &firstClass=``
  &lastClass =`` ]]

Output:
TopNav: Dashboard, Item 1, Item 2, Item 3
SideBar: Item 4, Item 5, Item 6
Tabs: Items 7 through 11

Note: Added info above. 3 wf calls. 1 with a single parent and child access, one with only a single child access, and one with no access listing. All resources from all three show. Also note modx not up to date, but bone stock.

All resources verified uncached. No resources checked as container. No element groups specified in ACL for user group that include chunks related to resources, though there are several for main template, and login chunks. No access is permitted if nav buttons are clicked, but they still show. Cleared cache, flushed sessions, deleted browser cache in all browsers, reset, logged in to new dispatch user account first. Tryed call cached and uncached. Still all items show. I've been struggling with this one for day's!!! Any help at all might save a life!

This question has been answered by pretender. See the first response.

[ed. note: pretender last edited this post 14 years, 6 months ago.]

173 Posts

crecorn Reply #2, 14 years, 6 months ago

Your calls not showing in your post. Make sure you wrap it using the insert code button above the text box.

Everything I know I learned on the internet. Saved me thousands in College tuition,

4 Posts

pretender Reply #3, 14 years, 6 months ago

Edited. Thanks for the assist cre! I would have waited days before looking in.

discuss.answer

4 Posts

pretender Reply #4, 14 years, 6 months ago

Solved.

Good advice -

No matter how slow you code, it will not be as slow as coding fast,and debugging later

.

In a flury of attempts to correct a previous issue, I deleted the "Owner" resource group, to which I assign all restricted resources, leaving all resources (except the parent) in both of the nav groups "un-assigned", and therefore implicitly giving access to all user groups.

This is such a humbling profession. Sometimes you can't see the ACL for the Document Trees?

If my blunder saves someone a new ulcer, it was not in vain!

http://rtfm.modx.com/display/revolution20/Security

To the MODX community: 6 months ago, I was the company nerd for knowing how to do more than simple math in an excel workbook. VLOOKUP was my only trick, but it looked like computer magic to everyone else. I was nominated to lead our 25 year old company's drive to get rid of obsolete data, filing cabinets, and now spreadsheets. Today my bag of tricks is composed more of a particular penchant for this type of blunder than anything else, and I'm still barely better than completely green, but... then... this was all greek to me. My biggest trick was remembering all my passwords! Now I have a little corner of the internet, that thinks what I tell it to, and paints it on computer screens anwhere in the world.

More than the $100's of books on my tablet, more than all the other resources I've found, more than any other single source of information, I owe what I DO know, to this community. Although this was my first post, I've been lurking here for 6 months, and this was simply the first question that I hadn't easily found, already answered. I've never been very involved in a forum, or online topical community of any sort. Any I've attempted to participate in I was either met with the proverbial "crickets", or a torrent of ego boosting thread hijackers! I know by now, this industry unfortunately lends itself easily to that sort of unproductive-narcissistic-garbage. THANKS FOR BEING THE VOID WHERE SUBSTANCE EXISTS!!! THANKS TO ALL OF YOU WHO'VE SILENTLY (AND FREELY) LED MY EDUCATION THUS FAR!!!

Most of all thanks for letting a dirty blue collar guy grab some coattail, and trade up to a white one with a future! [ed. note: pretender last edited this post 14 years, 6 months ago.]

Answered Wayfinder ignoring ACL and displaying all tree items (EDITED)