Resource Tree blank for newly-created admin user

I'm a relative MODX newbie, running Revo 2.2.4.

I followed the guide on Bob Ray's site (http://bobsguides.com/creating-manager-users.html) to create a new manager user. I eventually want to 'lock down' this user, so that they're able to create, edit and delete resources, as well as be able to create, edit and delete users in the "web" context - but nothing else.

I've duplicated the AdministratorTemplate as the guide specifies, and created a new Access Policy based on the duplicated template. Right now, all 172 permissions are checked, so I would have thought the user would have full control in the Manager.

However, when I log on as the new user, the Resource Tree is blank. I've tried "Flush Permissions", but it doesn't help.

Any ideas, please?

[ed. note: wakatashi last edited this post 14 years, 4 months ago.]

Try clearing the browser cache & cookies, delete all the files in core/cache (manual cache clear), and flush sessions in the manager.

Does reloading the page or clicking Elements or Files show anything in the tree?

Thanks Frogabog - I tried what you suggested, but when I re-login after flushing the sessions, the "Resources" tree is still blank (apart from the "Search..." box at the top).

If I click on the "Elements" or "Files" tabs, the respective trees there do show up as before.

Try the refresh tree button.

Have you looked at the documentation here? Maybe there's something you missed in the setup.
http://rtfm.modx.com/display/revolution20/Security

It's somewhat counter-intuitive, but the user needs a Context Access ACL entry for the 'web' context in order to see any resources in that context in the tree.


------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using.
MODX info for everyone: http://bobsguides.com/modx.html

Thanks guys. Bob - that's done the trick - adding an ACL for the "web" context has resulted in the Resource Tree showing up when logged on as the new user.

My hair will greatly appreciate being torn out no more

Just remember: almost every time you create an access rule for the mgr context, you will most often create one for the web context. Think of the mgr as the control room, just like in a theater. The web is like the stage (visible to the public). The control room needs to see the stage so it knows when to cut the lights, drop the curtain, etc. so too the mgr needs to "see" the web context. So users with access to the mgr will usually require access to the web context. The one notable exception would be a simple "subscriber" user -- one who can only edit their profile and otherwise can't do anything in the mgr.

I had trouble with the same thing. Most of the permission docs suggest that the 'web' context is only for the front end, which it mainly is, but for Manager users without Context Access to the 'web' context, the context doesn't exist, so its resources don't show up in the tree.



------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using.
MODX info for everyone: http://bobsguides.com/modx.html

Makes sense, gents - thank you.